665045b10a884d6dc58d53c24d81e669_JaffaCakes118 | Triage

Sharing

General

Target

665045b10a884d6dc58d53c24d81e669_JaffaCakes118
Size

4KB
MD5

665045b10a884d6dc58d53c24d81e669
SHA1

45d94f2bf4c74e2b55f169347c5f3208402287e1
SHA256

48b05064a898b0d96f09226daac2ef7489bbd6a0c15772356ef6574b611d4328
SHA512

90ae199b75a86eebd1574f42f500a88e127d2c6147c582beee37e857fa90932697eca71c97b20c6c7d2e104f50863fe8d0246582832fc7f83f6fc1c9d647e92a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
665045b10a884d6dc58d53c24d81e669_JaffaCakes118

Files

665045b10a884d6dc58d53c24d81e669_JaffaCakes118
.exe windows:5 windows x86 arch:x86

35ed93bae40e50382a68e058273898aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineW
GetSystemDirectoryW
Sleep
CopyFileW
GetVersionExW
GetProcAddress
LoadLibraryA
lstrcatW
DeleteFileW
LocalFree
SetFileAttributesW

shell32

CommandLineToArgvW

Sections

.text
Size: 1024B - Virtual size: 617B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ