abb9c6da1659ac4eb2cc9de483a5b31d_JaffaCakes118 | Triage

Sharing

General

Target

abb9c6da1659ac4eb2cc9de483a5b31d_JaffaCakes118
Size

3KB
MD5

abb9c6da1659ac4eb2cc9de483a5b31d
SHA1

972865b2d970e038741b23e6dc40c7c60689fed6
SHA256

c96098f7a8c67a8e53e38f84231122c09efcb03268afa4b1632a5d77b36168b5
SHA512

b2d4939b8a038abdbcc2e64ea9c68d187962bb90c71a43e51038bc0ac3e66a00f961a538486ddc711e46e7ee78799fd962b30308aca55da900fa2c7f5d33102f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abb9c6da1659ac4eb2cc9de483a5b31d_JaffaCakes118

Files

abb9c6da1659ac4eb2cc9de483a5b31d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

995f27dd4007f938ee7feec5bdefed7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

kernel32

GetModuleHandleA
FindResourceA
LoadResource
SizeofResource
LockResource
ExitProcess
RtlMoveMemory
FreeResource
lstrcat
GetTempPathA
DeleteFileA

Sections

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ