0807e9278bea585721089b4acbd3f6a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0807e9278bea585721089b4acbd3f6a7_JaffaCakes118
Size

3KB
MD5

0807e9278bea585721089b4acbd3f6a7
SHA1

c104e9c0bd0262962a20f9c93fa126a90a8b020a
SHA256

b5c3665e7f2b596f894f59c3542fef7e57c692890b80196e752dd14752d57d41
SHA512

667679a79c98a9419d2b694677f62a4681578210efa788ee85667c97e7d047c9d847dfc63cfde564fc3e0b76f21dc0f594dda872d27b9055737e8ad0d147740b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0807e9278bea585721089b4acbd3f6a7_JaffaCakes118

Files

0807e9278bea585721089b4acbd3f6a7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ac436f0f66db07e835bbed4b7d679615

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
WriteFile
GetSystemDirectoryA
lstrcatA
CreateDirectoryA
CloseHandle
lstrcpyA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 94B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ