f66d7297c8b3e00a4d19fb2d0c75ed79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f66d7297c8b3e00a4d19fb2d0c75ed79_JaffaCakes118
Size

2KB
MD5

f66d7297c8b3e00a4d19fb2d0c75ed79
SHA1

7a8990837b9aaac3a6c85c98bd49332899c71e0b
SHA256

b5872505e63fa5fb6359252690411999117e7dac6a6a9bb02d7385296cba0469
SHA512

b6a4cd13315a0fce4b43e254edb4146205ef1b1e799a7ef2b5ff30df2c802a4bbe850be4ce5f8d9610992007e3ebbc4b0c609947e53301ffef42e5641538468d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f66d7297c8b3e00a4d19fb2d0c75ed79_JaffaCakes118

Files

f66d7297c8b3e00a4d19fb2d0c75ed79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0072d3656e1a624078bd0b351cc1154c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA

kernel32

GetSystemDirectoryA
Sleep
QueryPerformanceCounter
GetWindowsDirectoryA
WinExec
ExitProcess

Sections

.text
Size: 1024B - Virtual size: 645B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE