eaa72285549c9dc3c81a26aec8c01907_JaffaCakes118 | Triage

Sharing

General

Target

eaa72285549c9dc3c81a26aec8c01907_JaffaCakes118
Size

2KB
MD5

eaa72285549c9dc3c81a26aec8c01907
SHA1

d2424ff75e132e45cdd0629aba66af705899eaf4
SHA256

164fe73e92dfa04dab4399f5cf7e09411b68efd606b65e922695ad988e7eb729
SHA512

92f21e049b5634b13b571001e55c2768ce029da577dafa3651c1d4d8afdf0da8f078907e67972fa90da741bb7e195fa5285e7fe05d27d324db4e65de6c298e7e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaa72285549c9dc3c81a26aec8c01907_JaffaCakes118

Files

eaa72285549c9dc3c81a26aec8c01907_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be65ee9a47245b17a9a79ff0db5e9ea8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
ExitProcess

urlmon

IsValidURL

Sections

.text
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE