dbfc4cc4faf88548b3b1499ba78a324d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbfc4cc4faf88548b3b1499ba78a324d_JaffaCakes118
Size

5KB
MD5

dbfc4cc4faf88548b3b1499ba78a324d
SHA1

ab4b4ebf19e75b8d6281797175a8ba976fc05207
SHA256

1f135eeca52d2f7094f4caeada87fdf09e66227f0afc04a53ffb5ac498ed0e63
SHA512

c8af9c5c7923040ed1b5b7049b3710d6039a6635949e21aa4457b7b308ef2cd3fcd6b3f7bf83606846b640f26b6a507a3aafa4c35c1c3a15e4e71b4988217262
SSDEEP

48:ZvtH9UKeRob1+HDlIzIZNRJmFCKB/x8HHAH7dhNAMoBAX:Z1deRoIHq8nRJmFCKB+n47hcK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbfc4cc4faf88548b3b1499ba78a324d_JaffaCakes118

Files

dbfc4cc4faf88548b3b1499ba78a324d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ee78b2c855deae629473ebfbe5610f07

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharToOemA

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
ReadFile
Sleep
WinExec
WriteFile
lstrcatA
lstrlenA

Sections

.code
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE