939cf372617bf1c494297a74e1e17e59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

939cf372617bf1c494297a74e1e17e59_JaffaCakes118
Size

5KB
MD5

939cf372617bf1c494297a74e1e17e59
SHA1

4d09b71c2baff62c3296cfa0db8ae7610067d89d
SHA256

399875e6c1b10a4f6f3f4793f14cae5c4460b9fa89ea63238e59fabf1a09aa3b
SHA512

49f318c6380bb9a4a78ac47a910069edcebc4a215ffd7bcb6482a1057587ea41d69fae5dddd219175d95a9d79990e034ae4c41d8b1b5f855411accaa1320ce51
SSDEEP

48:66pi353jI5aeBe9rKha6jMP9RpX1n/Y2xDnBOXkBbvBd3nqkA4J+Q:1i5jIBI6aX9V7BjHqL4J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
939cf372617bf1c494297a74e1e17e59_JaffaCakes118

Files

939cf372617bf1c494297a74e1e17e59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e46ae781a10ece27fdc28b8cfbb7d2de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetPriorityClass
GetCurrentProcess
GetCurrentThread
GetEnvironmentVariableA
GetExitCodeProcess
GetModuleFileNameA
GetShortPathNameA
ExitProcess
SetThreadPriority
lstrcatA
lstrcpyA

shell32

ShellExecuteExA
SHChangeNotify

Sections

.text
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE