f74956f72da4d6c56c484300d7652baa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f74956f72da4d6c56c484300d7652baa_JaffaCakes118
Size

4KB
MD5

f74956f72da4d6c56c484300d7652baa
SHA1

8bd00d4a1d8c813d1a8660e4b446c06ee591cd95
SHA256

004ae312181dce9b6f89ee61922c85cee14dc6bb0aa0810670e6f8f758b14176
SHA512

224893c64c46ba815638a145646e444e82a98e5ab72e8d630c6632e8353c5e4621e6fc9c1bcf933d55076d22f046fe45b89aea5ee764d871b6a435781b27234d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f74956f72da4d6c56c484300d7652baa_JaffaCakes118

Files

f74956f72da4d6c56c484300d7652baa_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2f3c5da38e687ed8e68cd2b55dbd54f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA

Sections

.text
Size: 1024B - Virtual size: 797B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE