47ee05f80db8f5c476f24e103dc87762_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47ee05f80db8f5c476f24e103dc87762_JaffaCakes118
Size

2KB
MD5

47ee05f80db8f5c476f24e103dc87762
SHA1

dc4eb998faf853417e2a692f903530fc1f19c34f
SHA256

03402c1c8441427f0cac5c94f91eada5a876ec912bdc4a04cd7a0cecc393d123
SHA512

8e171459386f039686422ed409d6c28b3da674b62bef758d49bd4a24b1a55fe175af5086ad25b460c822e5abe084a0972685ee7ad982755913df3e17fb170409

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47ee05f80db8f5c476f24e103dc87762_JaffaCakes118

Files

47ee05f80db8f5c476f24e103dc87762_JaffaCakes118
.exe windows:4 windows x86 arch:x86

34afc0922d3c682ad4cb6a9249cf83f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateThread
DeleteFileA
ExitProcess
ExitThread
GetLastError
GetModuleFileNameA
SetCurrentDirectoryA
Sleep
WinExec
WriteFile

Sections

.text
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ