dd3778278cc473e591d2e26b2f0455d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd3778278cc473e591d2e26b2f0455d4_JaffaCakes118
Size

3KB
MD5

dd3778278cc473e591d2e26b2f0455d4
SHA1

06bf239738159a39f1930cb81ecc787946f10811
SHA256

432d53b75bd9f39d639e78d85a6bd636e6951ab18dc89e7225a63f3fd0976313
SHA512

19cf0096593e5ad68a81b9bb71639170f61516f01a555936ebe035374aa3cc4c9ff33511872f1447ef1e54899e0f7cba6a4b734d37dcf2d30015f8e61c13851c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd3778278cc473e591d2e26b2f0455d4_JaffaCakes118

Files

dd3778278cc473e591d2e26b2f0455d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17ad49bd20201973a2c4447da54a43c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
GetWindowsDirectoryA
GetTempPathA
GetModuleHandleA
GetModuleFileNameA
WinExec
CloseHandle
WriteFile
ExitProcess
GetShortPathNameA

shlwapi

PathFileExistsA

Exports

Exports

DF
LLibRary

Sections

.text
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 513B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE