f15aca93f55bd249042675734ad2b367_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f15aca93f55bd249042675734ad2b367_JaffaCakes118
Size

2KB
MD5

f15aca93f55bd249042675734ad2b367
SHA1

a68bf33310044709eb7f96ca20940c9fd9435c21
SHA256

eb5aca0609913b56652d7a0f7c1212d31773437a971cf2fad8f5f807a3a6675d
SHA512

5762bcff09a15fdb105b9ce0c6c05f6d36e204df44af0931ef1fb13cc6bb2ed19d7b0973bd8225ddbe233da7d561bc1b7c91fe9ed4dc754f6f573578593cfe05

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f15aca93f55bd249042675734ad2b367_JaffaCakes118

Files

f15aca93f55bd249042675734ad2b367_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d7e7b7f541720b888df3220f4c4b69f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
WriteProcessMemory
CreateProcessA
CreateRemoteThread
ExitProcess
GetProcAddress
LoadLibraryA
LocalAlloc
LocalFree
VirtualAllocEx

Sections

.text
Size: 1024B - Virtual size: 958B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE