b6ba8d4f2bc2ffe99a5af468215b0a97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6ba8d4f2bc2ffe99a5af468215b0a97_JaffaCakes118
Size

6KB
MD5

b6ba8d4f2bc2ffe99a5af468215b0a97
SHA1

cf370d2ff73c6863aa94a328f70e9548887232af
SHA256

0928e10ddba4819d7d137c5548533db17613d8483d6b99bd6b0412bb0c37e5e7
SHA512

6c7aed263feedcebf58680e4d235c2bf627fb9b517b8020a61bce64e7763a9f73a59ec6dd0aa2e9bda5f77435be60053a91f9ac8a75e618001a84146570c3e31
SSDEEP

12:eFGSGqUoIWpPaUYCC5FM7AstwbwDqdP6hZvHZBB0R1X4epJ:eFGS/UHWpC/5FM7bHqdPAjB0R1IepJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6ba8d4f2bc2ffe99a5af468215b0a97_JaffaCakes118

Files

b6ba8d4f2bc2ffe99a5af468215b0a97_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4b3e8b6576fde7557d9d45f2461faf3f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
WaitForSingleObject
CloseHandle
ExitProcess

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE