759d3e2e3127e721881c8706fd854e38_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

759d3e2e3127e721881c8706fd854e38_JaffaCakes118
Size

16KB
MD5

759d3e2e3127e721881c8706fd854e38
SHA1

413e8c60827bd4b13aa10ca9d2b8e71d4e0aa535
SHA256

fdcbff5d6842fd62106eb5bd2a297c95d05e02ba5369048513b9b79df6f6b64a
SHA512

41bbf529e86df2de1a80540000459b0033f5f1dc83865bd8bca689bdb76b7449aff1940c840e1863112719c0af858845a6e929ba2ac4ffee671ef58facae4233
SSDEEP

24:etGSVoTPQh4dJ8WihtAfc6hknZBNr1WSm+rO0ME6Mb8E6MYhBEkTBjJpuVYGPP:6E/dahQcAEr1WFXwohBEIngY2P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
759d3e2e3127e721881c8706fd854e38_JaffaCakes118

Files

759d3e2e3127e721881c8706fd854e38_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c490fe64c4a831cca487d997a122a956

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
ReadFile
GetFileSize
ExitProcess
CreateFileA
GetModuleFileNameA
GetModuleHandleA
GetTempPathA

shell32

StrStrA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 959B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE