ac84cdb9cd739f27f50d7ac2f5c287fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac84cdb9cd739f27f50d7ac2f5c287fb_JaffaCakes118
Size

3KB
MD5

ac84cdb9cd739f27f50d7ac2f5c287fb
SHA1

e27d211a9a43df993acd4672f499d40e1ba0063d
SHA256

4bee4dafc518617b1195eddee15a141835ba731887da5c8366460a893d40d226
SHA512

837caae2f48bc731e480247b1398d01ab122e8f7e30277012181e1becb6fb34550ce20bfa3f7bce2142fc56f66881656f52777c98db3f45b816043de0cdfa20a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac84cdb9cd739f27f50d7ac2f5c287fb_JaffaCakes118

Files

ac84cdb9cd739f27f50d7ac2f5c287fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2bf10fcb6977cb97a081d462a036b6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
ReadFile
SetFilePointer
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ