db09b4930bbdb69b0830dcc2d64035d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db09b4930bbdb69b0830dcc2d64035d9_JaffaCakes118
Size

3KB
MD5

db09b4930bbdb69b0830dcc2d64035d9
SHA1

16b7b247c5f48a9213720edddf922c7ad1902e73
SHA256

930a791ee16337d3a2889e200ce7eba17797ec4ffd3fc3c97a85d601be33046b
SHA512

d34237b9c211e708c0ea819c176588e29bad2c49cff53c6fcbec4867fc02016231c47a286c9b6be1e17fc39722524a1f0aac5e4fba5af713e8230ac70c9bb691

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db09b4930bbdb69b0830dcc2d64035d9_JaffaCakes118

Files

db09b4930bbdb69b0830dcc2d64035d9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

28ce0db4206e92ed8f7dd95c6ec12fce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

WinExec
ExitProcess
GetTempPathA

shlwapi

PathFindFileNameA
PathCombineA

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 414B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ