f817be653905822af2ef815387e72236_JaffaCakes118 | Triage

Sharing

General

Target

f817be653905822af2ef815387e72236_JaffaCakes118
Size

4KB
MD5

f817be653905822af2ef815387e72236
SHA1

370a0d9e8cac0467a1ade0f645215bf33cea0680
SHA256

7f2a2cfb4f6d86de69e4054a56cf3ad8adfd335e14ff9309655ce4d34aed4d3b
SHA512

b19c530075e843cfcef5046c7c992c264789cc262acd98cd0965c39394aadd03ea4e69d51a115ca4df79f0e285153e92915b2b4954e699295be2f0aa912a4026

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
f817be653905822af2ef815387e72236_JaffaCakes118

Files

f817be653905822af2ef815387e72236_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d578d8192901fc4d3ecdcdfd9f486dd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntdll

strlen
memset

msvcrt

malloc

kernel32

GetTickCount
VirtualAlloc
OutputDebugStringA
OpenProcess

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ