d2f5343d0eb4f1df97a4eb4581044fc4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2f5343d0eb4f1df97a4eb4581044fc4_JaffaCakes118
Size

2KB
MD5

d2f5343d0eb4f1df97a4eb4581044fc4
SHA1

4bf2f879ff232026ea17a6331ccf8f78acab63ed
SHA256

2c4cc82fd71fae915e44ea986e358b7afa9e3e344a009b265bd440dcff2d98e8
SHA512

044fa081ea3adc5ed447235ca2a0b0abee6743ff377985d9b0301469c0918ea3c1cd31dab9e06ed4f817269aa0cec7cb0114e0827fdc2ad9639ec6b0b5e08fd9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2f5343d0eb4f1df97a4eb4581044fc4_JaffaCakes118

Files

d2f5343d0eb4f1df97a4eb4581044fc4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0e01d459c514bf723f5fd773c3fd7f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
CreateThread
DeleteFileA
ExitProcess
ExitThread
GetFileSize
GetLastError
GetModuleFileNameA
MapViewOfFile
SetCurrentDirectoryA
Sleep
UnmapViewOfFile
WinExec
WriteFile

Sections

.text
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 438B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ