42539fb58ef2673370f353d92ded0487_JaffaCakes118 | Triage

Sharing

General

Target

42539fb58ef2673370f353d92ded0487_JaffaCakes118
Size

2KB
MD5

42539fb58ef2673370f353d92ded0487
SHA1

96721f0e0697d7aff1392e36c3726cce33cc5bed
SHA256

9b50cddd32a5b2033510a286245190e0336fd3960b26cb64c6873b357f86eb3f
SHA512

da8801db78c834690a9acda6d052111dc784c764cda607c274ca82538934ae306b9f09b1cd3b0b98399f27e3332cfb8360ce8935924401bd322829df8eb41cd6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42539fb58ef2673370f353d92ded0487_JaffaCakes118

Files

42539fb58ef2673370f353d92ded0487_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df5201add3865cf73591a15d22552cb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CreateFileA
ReadFile
GetTempPathA
SetFilePointer
CloseHandle
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 576B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 310B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_INIT_
Size: 32B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE