7386eb135c8cea8b549470b25eaebd81_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7386eb135c8cea8b549470b25eaebd81_JaffaCakes118
Size

97KB
MD5

7386eb135c8cea8b549470b25eaebd81
SHA1

3d175751bac067ccb52c1c961a640728d9c469ad
SHA256

d8bfe381ccedcdb507a0eb503f9a5e3fa756f18bde54cf2503a3abc93d9a4976
SHA512

7d5ff3bff0422b86eda3db9eb2bdd5ce863a70a631babaf31597e606ff1f2110de051a3ab0bf9b917d9aed8b07d48b16e46eb61f766221543dc5f108dc695456
SSDEEP

1536:HN+4aIjDFL1Xul6KF9VZAOd1xUt8OJLmlgVU/KXfMsRbBxcWiwLppo6tV:HNDaMBY3FZAU1i8u1fTxcWxg6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7386eb135c8cea8b549470b25eaebd81_JaffaCakes118

Files

7386eb135c8cea8b549470b25eaebd81_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4b3e8b6576fde7557d9d45f2461faf3f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
WaitForSingleObject
CloseHandle
ExitProcess

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE