d0c906c0ef2a6dc44b9a71937b760cbe_JaffaCakes118 | Triage

Sharing

General

Target

d0c906c0ef2a6dc44b9a71937b760cbe_JaffaCakes118
Size

4KB
MD5

d0c906c0ef2a6dc44b9a71937b760cbe
SHA1

2a6e565efb8f41385cbe3dbcddd948ce9519e979
SHA256

d4bafa364fc6187f6bf61bbb46ec4979c30bb22d96358e454c198715b8523fca
SHA512

9de95c00b9708403cc9683ad8bcfe89f2c4b3c48df9935ba1d1b9dc976d70228a3dfe2d0898fe81680b69d42983b33d4e1d327aa581389aff473bc56c45fa1eb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0c906c0ef2a6dc44b9a71937b760cbe_JaffaCakes118

Files

d0c906c0ef2a6dc44b9a71937b760cbe_JaffaCakes118
.exe windows:5 windows x86 arch:x86

35ed93bae40e50382a68e058273898aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineW
GetSystemDirectoryW
Sleep
CopyFileW
GetVersionExW
GetProcAddress
LoadLibraryA
lstrcatW
DeleteFileW
LocalFree
SetFileAttributesW

shell32

CommandLineToArgvW

Sections

.text
Size: 1024B - Virtual size: 603B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ