bf00fe993a7afce3d8a698ecfa426999_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf00fe993a7afce3d8a698ecfa426999_JaffaCakes118
Size

3KB
MD5

bf00fe993a7afce3d8a698ecfa426999
SHA1

d024e2fa5f3742603415882cf6c87aade9b72fe8
SHA256

ba198fdca57649e86d26ae6fa917e6dadede15e03d660da717fad27c01e2fb5e
SHA512

2c20a27f1838bf586c4e18e5324c723843421af1f04442b7bc32f90cef34093328f776b18691899a1fd61e0bec13d4f7743c9d020f901d799e4020bcce0a3cc4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf00fe993a7afce3d8a698ecfa426999_JaffaCakes118

Files

bf00fe993a7afce3d8a698ecfa426999_JaffaCakes118
.exe windows:1 windows x86 arch:x86

995f27dd4007f938ee7feec5bdefed7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

kernel32

GetModuleHandleA
FindResourceA
LoadResource
SizeofResource
LockResource
ExitProcess
RtlMoveMemory
FreeResource
lstrcat
GetTempPathA
DeleteFileA

Sections

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ