2686418c426a3e8ecc75624b96560a53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2686418c426a3e8ecc75624b96560a53_JaffaCakes118
Size

3KB
MD5

2686418c426a3e8ecc75624b96560a53
SHA1

ce03eb69e4ebd04c02409062300ecf01c3c6e527
SHA256

86bb9aa8e723bc85cf413eb3f932cbd48b4176d9fd2856de40c819da5f87e531
SHA512

fc4fc077210f491b4a716bc0ac27750c6d9f89038c2688855b111559d3bc66a28ff5a44a18a81d6ced2edf5671d1044027737c9c9127f1be75f1a4dca23434b7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2686418c426a3e8ecc75624b96560a53_JaffaCakes118

Files

2686418c426a3e8ecc75624b96560a53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4592a51e6fe78d18da25a5d94b0153f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
MultiByteToWideChar
WaitForSingleObject
GetCommandLineA
ExitProcess
CloseHandle

advapi32

CreateProcessWithLogonW

Sections

.text
Size: 512B - Virtual size: 299B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ