a5fc0d31ef8a4bd2571fa53f6afed28c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5fc0d31ef8a4bd2571fa53f6afed28c_JaffaCakes118
Size

8KB
MD5

a5fc0d31ef8a4bd2571fa53f6afed28c
SHA1

4895a536f1d2b4a88c5e3ed34d97ebfe46263748
SHA256

554c7e0c7e0ffae9c28eaf78ecf4ffa5b393220e2777a575b6fcbb08608c640d
SHA512

d301fc84a284549a2f687ffc52c1b7abdc0d37560eaf8c13716679b08772d316800b2ed222b70b8066ae692b15453f2c7848904a8dc144520ac11126034d5c10
SSDEEP

48:i8S49/vhxJzESzrdNGZV89YqTp7doBMho6bB:V1vhxJFGWq2hx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5fc0d31ef8a4bd2571fa53f6afed28c_JaffaCakes118

Files

a5fc0d31ef8a4bd2571fa53f6afed28c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2bf10fcb6977cb97a081d462a036b6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
ReadFile
SetFilePointer
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ