49579ad3e1da7b26efb76dcb6c58ecd7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49579ad3e1da7b26efb76dcb6c58ecd7_JaffaCakes118
Size

2KB
MD5

49579ad3e1da7b26efb76dcb6c58ecd7
SHA1

c1d20c97920e6effcb19c179054e325f3989b391
SHA256

fe5156aa76d8e5e6310c56dd40442b83ee3ac1e6e70868ed42bd71ddd8bc2780
SHA512

69d290b03bda4fbbe91504f3934cc44e0d0ebc2a136221da44f47f0f1c34657c2a65caa3a0a6cdca9be3725a9d4c2bd9ac0461dd55e0de570daea0219f2855c0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49579ad3e1da7b26efb76dcb6c58ecd7_JaffaCakes118

Files

49579ad3e1da7b26efb76dcb6c58ecd7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9b84ae9958b0ad65d9e9e4f69cb5717

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

g:\downloads\internet\bnets\prosc_bmail_20061007\Mailer3_2\Helper\Release\Helper.pdb

Imports

kernel32

GetWindowsDirectoryA
GetCommandLineA
Sleep
CreateProcessA
lstrcatA
GetStartupInfoA
SetFileAttributesA
MoveFileA
DeleteFileA

Sections

.text
Size: 512B - Virtual size: 435B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 433B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE