bd96bd89dc4b1c910ed4d389eb9cea86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd96bd89dc4b1c910ed4d389eb9cea86_JaffaCakes118
Size

10KB
MD5

bd96bd89dc4b1c910ed4d389eb9cea86
SHA1

59520643a2df5501e84ef066101e0339718389a0
SHA256

78954ed9a2842171790576aac71c98b54b91e3244404fceea8b226b08f4cd8f9
SHA512

d14986e58d0f8dab5a53528dc741e61da3a3fd9efad7ee9039ab35b9acb86d137b3f74cc64bacea9c7700ed7fae06d3c3b20b16a1f4aeb2d65bb5e0407c6e32b
SSDEEP

192:nOn4HyOplo9RVKcPkvi5OH8UnAXOw22TtxrCIwWD5K:nO4Hrplo9bKcsK5OC22TPxwWDE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd96bd89dc4b1c910ed4d389eb9cea86_JaffaCakes118

Files

bd96bd89dc4b1c910ed4d389eb9cea86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1324793769da58a05723123028c98017

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDoubleClickTime

shell32

ShellExecuteA

shlwapi

StrStrA

kernel32

lstrcpyA
lstrcatA
GetVersion
GetTickCount
ExitProcess
GetCommandLineA
GetModuleHandleA

comctl32

GetMUILanguage

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE