75cde5069524655e43f74c6a39784b6d_JaffaCakes118 | Triage

Sharing

General

Target

75cde5069524655e43f74c6a39784b6d_JaffaCakes118
Size

3KB
MD5

75cde5069524655e43f74c6a39784b6d
SHA1

bbe2d09189b95e1ad1752de489ed21e8ab642416
SHA256

13fed05f15a139e1e29b76975205a904ac2e169971d5b04ed2bb3268f6e2c317
SHA512

ae3931a1de13f4616552c36f36f0d0bebbff20afdc238ed155a6e4901e9194082d6c2012a8a4e9d6d50efac946c2a62faa93f330d39d5372ac48d96196e879f3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75cde5069524655e43f74c6a39784b6d_JaffaCakes118

Files

75cde5069524655e43f74c6a39784b6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2a8247c56355931966c81222283ce51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetDriveTypeA
GetFileSize
RtlZeroMemory
Sleep
lstrcatA
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 838B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE