f211407c04b1a50caea25b4276c7fc6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f211407c04b1a50caea25b4276c7fc6e_JaffaCakes118
Size

2KB
MD5

f211407c04b1a50caea25b4276c7fc6e
SHA1

36f0d1c45e80478eeb2e44cd72f57282aa9b5d6a
SHA256

d420d325eac21fc65b2c8575659c0b929d208c24d92d205b81dd6cf99945604d
SHA512

14bcfdd8343497911666d5836c6762d6a778a1c00bc6305ef7b309e2138da5c0716656259d3769d919f2aa43b298f20cf3528c244d185001ce36479e4355374d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f211407c04b1a50caea25b4276c7fc6e_JaffaCakes118

Files

f211407c04b1a50caea25b4276c7fc6e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d66a3b7c64fe887f9fc016417924a323

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ExitProcess
Sleep
GetProcAddress

shell32

ShellExecuteA

Exports

Exports

DF
LLibRary

Sections

.text
Size: 512B - Virtual size: 319B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 305B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE