b28217cd6695bd243c0ec161c3e3097b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b28217cd6695bd243c0ec161c3e3097b_JaffaCakes118
Size

2KB
MD5

b28217cd6695bd243c0ec161c3e3097b
SHA1

dd53ff6f14a259dd10e4c1f0302529bdd9595669
SHA256

56d732cadb48e0d12071af81cc4ac36907286d8f0f05265fbc1619b3d176bb74
SHA512

22453b14ab90a34214a8684985b60ee6bb95a31235bcac1d20fb0201c4dd078842f43771ef48cefd7ae83c276ee17433c71f55367285e7a1c07439f8415a0967

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b28217cd6695bd243c0ec161c3e3097b_JaffaCakes118

Files

b28217cd6695bd243c0ec161c3e3097b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ae79eaede1f2fa017b63860935a2d072

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
GetUserDefaultLCID
lstrlenA
GetCurrentDirectoryA
GetCommandLineA

user32

GetActiveWindow

Sections

.text
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE