3b8d961227735d9cdd2678deb439ff8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b8d961227735d9cdd2678deb439ff8f_JaffaCakes118
Size

4KB
MD5

3b8d961227735d9cdd2678deb439ff8f
SHA1

d22f6455b34bf3b6038ea754b821c353ca0f98e7
SHA256

5d90814ca7aa3b5676b4823f9a15ab7fa2666cf1a12fb2846e037d2f9a3646b6
SHA512

7a0651dd9647c6203d319574639adfd6d77083cc764f17823142bc2ae226589da38a8b2656245b747b0f62d15ee438ab0d133c041cb648a689449b6144855508
SSDEEP

24:Fhh/o9W8NgThbRdoBMhoCIAQg5WXpmlxoPGJUe7pMNGKCrQS6tgPMNkrTUNgS:Z/6edoBMhoCnwXpsesdsCmc8v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b8d961227735d9cdd2678deb439ff8f_JaffaCakes118

Files

3b8d961227735d9cdd2678deb439ff8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a1f3c85938d839f223b9d794fc14cbfa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
GlobalAlloc
GlobalFree
ReadFile
SetFilePointer
WriteFile
lstrcatA
lstrlenA

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE