f4a5f40e8cbf0b3cafcf9c7626f08e3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4a5f40e8cbf0b3cafcf9c7626f08e3a_JaffaCakes118
Size

2KB
MD5

f4a5f40e8cbf0b3cafcf9c7626f08e3a
SHA1

e273494e7f48d83fe7f3b4fe63ff97fc03426783
SHA256

be8dca4bad83df2f99b18c4e2bacd01ffb954e0e1e94fcfc71ecc5d4a9346511
SHA512

23546f842bbca04565e378ed254b1e194ce03d885ea1bf5cb317cfae120aedf7c488e7b9bd2816e3c37f2c9283539415685d923828c75220a50bacac531d25e1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4a5f40e8cbf0b3cafcf9c7626f08e3a_JaffaCakes118

Files

f4a5f40e8cbf0b3cafcf9c7626f08e3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be65ee9a47245b17a9a79ff0db5e9ea8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
ExitProcess

urlmon

IsValidURL

Sections

.text
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE