b46f9aad3772b98715e239a681957adc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b46f9aad3772b98715e239a681957adc_JaffaCakes118
Size

3KB
MD5

b46f9aad3772b98715e239a681957adc
SHA1

b2cc5bc936a6c7437845a4a477c9f52697b97feb
SHA256

3474f626329d3944a716b28fe112d025feee1d9a03753d6d6bcd62c39b259213
SHA512

23d8c2b27c404c092bac6ac1567f35ac5e2c030dcfa7810bd770a0cc08ad28c9d04f27f9c06f801bf839ca3b55db5aa0f6d4b1f6d9c4b85df9e427fbc5a470b6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b46f9aad3772b98715e239a681957adc_JaffaCakes118

Files

b46f9aad3772b98715e239a681957adc_JaffaCakes118
.exe windows:1 windows x86 arch:x86

9533e887cab5113e9cd1d130843939ac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateProcessA
ExitProcess
GetCommandLineA
GetTempPathA
HeapAlloc
ResumeThread
WriteFile
WriteProcessMemory
lstrcatA

user32

MessageBoxA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ