bd099256557986ab8e97960b5e8b996f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd099256557986ab8e97960b5e8b996f_JaffaCakes118
Size

4KB
MD5

bd099256557986ab8e97960b5e8b996f
SHA1

9887f7194091ba45a7787337c13b13f5336abad2
SHA256

6634cce2361a2e1c904181042acee052263748d77901b2825cd2e8b03415df90
SHA512

0b8d69806bdec312d537f85dbd22c18017dcd0c1dc06ef6773eab95a83765388619a66daf7de5e17ef8ec4cd0f56cc8908215245837966d929c7d7783683a798
SSDEEP

48:ZvtEh2tLBfu0BvtEWVKuF6ymzp0UrLXE6xBtY612Td95gSTyHxGcoCH5H0doBM:Z1f9/1EWjF6pziOjY612TqMyJoip0qe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd099256557986ab8e97960b5e8b996f_JaffaCakes118

Files

bd099256557986ab8e97960b5e8b996f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

7fc8a871ff1eb82604471bca09bacb5f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetEnvironmentVariableA
GetModuleFileNameA
GetProcAddress
GetShortPathNameA
GetSystemDirectoryA
LoadLibraryA
LocalAlloc
WriteFile
lstrcatA
lstrcpyA

shell32

ShellExecuteA

Sections

.flat
Size: 512B - Virtual size: 349B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE