a5e8948e7c0d3555868a385d735139dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5e8948e7c0d3555868a385d735139dc_JaffaCakes118
Size

6KB
MD5

a5e8948e7c0d3555868a385d735139dc
SHA1

ca97a1a055881ada3da57c0449111c63811bf6fe
SHA256

9232c6e3d27ef4d9c0a40c16b260772971f92fd56e251a1503fc57b82ea7ff7e
SHA512

62e2878ee47e2c5bcf667a80812c99ecff78d7b7d29c4930df560de3985ad55400e988fad353c0312ba3e1da9e867c794541289e2da8d8a757052fbf48bde1a8
SSDEEP

12:eFGSGqUoIWpPaUYCC5FM7AstwbwDqdP6hZvHZBB0R1X4epJc:eFGS/UHWpC/5FM7bHqdPAjB0R1IepJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5e8948e7c0d3555868a385d735139dc_JaffaCakes118

Files

a5e8948e7c0d3555868a385d735139dc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4b3e8b6576fde7557d9d45f2461faf3f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
WaitForSingleObject
CloseHandle
ExitProcess

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE