af8577df36a58fb5034f9a4fae707222_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af8577df36a58fb5034f9a4fae707222_JaffaCakes118
Size

4KB
MD5

af8577df36a58fb5034f9a4fae707222
SHA1

703b25cfd8a4b9387e875886b09e18e7c22165b0
SHA256

9ce1eed318ca72a6afe2816254a8a2a91ca3ef888e7431124b65634265879c9c
SHA512

b8bd2edfcb6a62116cb8656f357d9103ffa7f99b0326d171c2d6e059dd75c85457849e7532d703593279d3cfcce7ead3d7c95d2c48d2b414f4065b3ccc69ad59

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af8577df36a58fb5034f9a4fae707222_JaffaCakes118

Files

af8577df36a58fb5034f9a4fae707222_JaffaCakes118
.exe windows:1 windows x86 arch:x86

362ef36533d054b8ac712a643bc81fbb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
lstrcatA
_lcreat
_lwrite
_lclose
WinExec
ExitProcess

Sections

.flat
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 723B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.import
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE