3bfad47c405e0987277400743471ff2d_JaffaCakes118 | Triage

Sharing

General

Target

3bfad47c405e0987277400743471ff2d_JaffaCakes118
Size

60KB
MD5

3bfad47c405e0987277400743471ff2d
SHA1

cec104e2aef1617eee6a813f08d3f67351a478a1
SHA256

2468258983110187a94595a4533b4f231085da04878ea21a203ed1dd2d2ff300
SHA512

36897dbacd77fde70af3706e6f0ce604325e07be79fc987e08726d34ea864e6c39fb32e7bac86c72916f913e796e96afd896585792ecda5e32ad3f6fd10cdd10
SSDEEP

1536:v4lW2Kc+i3v978kqXId5moN2sEmjk2BsI2v+l+vB3n7T:v4IRi3kslkwsIw3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bfad47c405e0987277400743471ff2d_JaffaCakes118

Files

3bfad47c405e0987277400743471ff2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a1f3c85938d839f223b9d794fc14cbfa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
GlobalAlloc
GlobalFree
ReadFile
SetFilePointer
WriteFile
lstrcatA
lstrlenA

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE