5b066a8a85bbf2f4a8652ff4b02db641_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b066a8a85bbf2f4a8652ff4b02db641_JaffaCakes118
Size

199KB
MD5

5b066a8a85bbf2f4a8652ff4b02db641
SHA1

e79033cfd14d74ceddd257152cbbdbf0b6227345
SHA256

6e25dc2bd7851e26214df2165475886775b1a62a877f01cd3dd9b40258ac02c8
SHA512

52c1b1f01c280814107b444af119a0e483b645770481b492a0096015fb23569432b22cfadc0c30953cc4ecf04102548a3776826d18933059ce56100b0fdc1016
SSDEEP

1536:hBm5JBxmIv4S11bjt6426XBZtqatQWsyoQJyO9qn9LhXztKm2WEMmnIc:D2z4IQSB6gBBQioUGBZtKoNmnh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b066a8a85bbf2f4a8652ff4b02db641_JaffaCakes118

Files

5b066a8a85bbf2f4a8652ff4b02db641_JaffaCakes118
.exe windows:4 windows x86 arch:x86

194970245e9090de6a89595357057932

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
GetTempPathA
GetCommandLineA
GlobalFree
CloseHandle
WriteFile
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GlobalAlloc
GetModuleHandleA
GetStartupInfoA

shell32

ShellExecuteA

msvcrt

strrchr
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter

Sections

.text
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE