bf556d9b7d446843fde4a3102c952b44_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf556d9b7d446843fde4a3102c952b44_JaffaCakes118
Size

3KB
MD5

bf556d9b7d446843fde4a3102c952b44
SHA1

aa33d3c2a513e28cccc3d5b4ff2de48019360cdf
SHA256

87845674151df6b98b1807fda75874dea58d8978900db660aef9a3b8c7f2ff2c
SHA512

e953b4f50d9e9f7183d82d10e8510c7b4fdec28bfae7f394df36722902987ae1d35555aef1305e14b7b4ed71c5ae09f003f16b69fc95d5306511dce95cc817b5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf556d9b7d446843fde4a3102c952b44_JaffaCakes118

Files

bf556d9b7d446843fde4a3102c952b44_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c73b37e21876e533e96eb5dc541813e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
GetTempPathA
GetWindowsDirectoryA
GetSystemDirectoryA
lstrcatA
SetFilePointer
ReadFile
GetFileSize
CreateFileA
GetModuleFileNameA

user32

wsprintfA

shell32

ShellExecuteA

msvcrt

malloc
free

Sections

.
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ