73b04c45d68e7a0aeba4e5ceb4a7f82d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73b04c45d68e7a0aeba4e5ceb4a7f82d_JaffaCakes118
Size

2KB
MD5

73b04c45d68e7a0aeba4e5ceb4a7f82d
SHA1

f4cd674e90289f5545225e5a3661f115746d0d85
SHA256

e2b8e20fbb008e3791d3531308e071e7ce70b4e067a7c64a63ed46920efcbf94
SHA512

43fb0acb8d8be618e7884f47868154cdba1bc5b3d6bfd0ef82d9d1f1da4fffffb0cae50f6fffa2c056416a5b25759a30629618041e64da427630b87aaae0d083

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73b04c45d68e7a0aeba4e5ceb4a7f82d_JaffaCakes118

Files

73b04c45d68e7a0aeba4e5ceb4a7f82d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7acda9dbf6c17a6b5da32e77e97d838

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
DeleteFileA
WinExec
GetTickCount
GetTempPathA
GetProcAddress
LoadLibraryA
ExitProcess
GetLastError
CreateEventA

user32

wsprintfA

msvcrt

fclose
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z
fscanf
fopen

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ