3d820ea021ed22996f873b48e2f8df2d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d820ea021ed22996f873b48e2f8df2d_JaffaCakes118
Size

22KB
MD5

3d820ea021ed22996f873b48e2f8df2d
SHA1

373adfa99b3f7bd34e070b547fa370eafe1e93a7
SHA256

db023f3427fb2ada09b749a726743e4f215653cd2d47e548f8d71b0eca47d199
SHA512

89b36567a4dd06b47d890f1ca95c6a4df66e496d8c2f7c506e7f29581e39ea73d9576456e557ccc330385a19f60756091c440e91a0b568831f27f900d140ce2a
SSDEEP

384:U9kcqWBCu84UOY08BgfmB7Fyvupe1eY0JwtMwKFTwNcSWVT:SkLWr84pTYgeBByvJ1eRSMwKF0NczVT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d820ea021ed22996f873b48e2f8df2d_JaffaCakes118

Files

3d820ea021ed22996f873b48e2f8df2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

276d36f2dad2739a2662d58aff5af41e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA

kernel32

ReadFile
lstrlenA
CloseHandle
CreateFileA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcpyA
SetFilePointer
VirtualAlloc
VirtualFree
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE