d0a29d8250df1df31d045195e9871362_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0a29d8250df1df31d045195e9871362_JaffaCakes118
Size

5KB
MD5

d0a29d8250df1df31d045195e9871362
SHA1

f71f702898e0164d525353fe88a4e72e15c1d492
SHA256

ef5a645127891436229d946dbbe3a76447cb5881b3b9b882e5af0e5083e3bceb
SHA512

3805666d86a5f4aad4f2a1d282ab50bc3a1542c9b316d2ddb8bc2de7e8fbdeb7e935e1b7a4484f4a9632c386616512bc4a53a31881e5c02f2562e590853c61c0
SSDEEP

48:ZvtD+QU0QlWs1P3pIzIZ7NDv7DXrv2V3Lcl8sHHAH7dhNAMoBAX:Z1rmlWsp68BNL7DjE38n47hcK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0a29d8250df1df31d045195e9871362_JaffaCakes118

Files

d0a29d8250df1df31d045195e9871362_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ee78b2c855deae629473ebfbe5610f07

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharToOemA

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
ReadFile
Sleep
WinExec
WriteFile
lstrcatA
lstrlenA

Sections

.code
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE