2606f0bb53df9b4ebed526ab61c15754_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2606f0bb53df9b4ebed526ab61c15754_JaffaCakes118
Size

39KB
MD5

2606f0bb53df9b4ebed526ab61c15754
SHA1

df3afb3be7150d1863c6252299c0c0044afe5575
SHA256

a280547027a367bdfb8410fe99a64b92c53e471fc1b7ad4dc06971bc8533cbb7
SHA512

cdd992cd3288f903a7918183a640bb8147e47a99651722f416007b0d11b7a92702822da0fed82b8fd98d144613de0e2bc6598a68ff4520334739dcf23cd75209
SSDEEP

384:2E2WaHWIlJbW6VuEyhJZAZrGeDJDmguWKzx1gpxQJ4L2OHQWoRWIZEFGk:IplUhXAZrHgguWEx+vQUtHyt7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2606f0bb53df9b4ebed526ab61c15754_JaffaCakes118

Files

2606f0bb53df9b4ebed526ab61c15754_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5fd71c0e7c0fc76479130909ffd17c6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
FreeResource
CloseHandle
WriteFile
SizeofResource
CreateFileA
lstrcatA
lstrcpyA
GetSystemDirectoryA
LockResource
LoadResource
FindResourceA
GetCommandLineA
FindClose
FindFirstFileA

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ