fe883cf7b18dd7c1cb0c4ea3e987e9e1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe883cf7b18dd7c1cb0c4ea3e987e9e1_JaffaCakes118
Size

4KB
MD5

fe883cf7b18dd7c1cb0c4ea3e987e9e1
SHA1

915276f0f292951f8fdc159fe98fc75f51cb6b6c
SHA256

d2d62d9c197eca4213505fc5bb75383ccb961504a66f4112635183ed3d77568f
SHA512

4b6100d97c63dbdca247ee09e527f9be3192065dce0e0269aaeeb7440c71ec76ea63ce84841366a948c64e5d280b3bd4d91b50714f3685bf0b0f373b0b9fb046

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe883cf7b18dd7c1cb0c4ea3e987e9e1_JaffaCakes118

Files

fe883cf7b18dd7c1cb0c4ea3e987e9e1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

35ed93bae40e50382a68e058273898aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineW
GetSystemDirectoryW
Sleep
CopyFileW
GetVersionExW
GetProcAddress
LoadLibraryA
lstrcatW
DeleteFileW
LocalFree
SetFileAttributesW

shell32

CommandLineToArgvW

Sections

.text
Size: 1024B - Virtual size: 603B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ