3df7703b5464682bb63c2d0380cf17eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3df7703b5464682bb63c2d0380cf17eb_JaffaCakes118
Size

51KB
MD5

3df7703b5464682bb63c2d0380cf17eb
SHA1

a784cf0ae0b396d9b1195a2154a98a42cb21e856
SHA256

2bb69fc85138769f70f842b807a55e453cc5bbd6437623c92f036e5bc1612fa5
SHA512

92a39ee88a323515725b0a1532ff50d00d2f820a2270ae509045d12685f6738e3328bc87fa9b7896887343d7b074f03cba33dfa4482453259cfe2e6bd648899a
SSDEEP

768:ELfXldAj8hDhQicLjaXX+sIaZctZgvPZwqPTg2y3REjtMaSYLy5HJMbqgrtL:0HAgpUewaZc/OnPM2AUtRpAHJMWgR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3df7703b5464682bb63c2d0380cf17eb_JaffaCakes118

Files

3df7703b5464682bb63c2d0380cf17eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c8757f0af9453b80a01cbf24f4040a42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__CxxFrameHandler

mfc42

ord1979
ord540
ord800
ord665
ord2818
ord5186
ord354

kernel32

GetTempPathA
SizeofResource
FindResourceA
LoadResource

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 438B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ