fb7f62a01a25ce7cf6c2a12906ebda61_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb7f62a01a25ce7cf6c2a12906ebda61_JaffaCakes118
Size

3KB
MD5

fb7f62a01a25ce7cf6c2a12906ebda61
SHA1

e763fe73d386d5e7a90b833018e8c3dbf9bb6bcb
SHA256

8b26e33485dade7523352af4b7bf12c886eb149c660141b7beb5e4a8c203ed49
SHA512

046022f41679970cc7f537a786a5cd0aa9343ac7d088d32f4d3ae4ae934ebf376aa358e76c8ef668221a8f44cd05788387caf2d5131ff3f2523c90d27d2511fd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb7f62a01a25ce7cf6c2a12906ebda61_JaffaCakes118

Files

fb7f62a01a25ce7cf6c2a12906ebda61_JaffaCakes118
.dll windows:4 windows x86 arch:x86

54361d35ac91f7861d151d3559dbc51e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileA
ReadFile
VirtualAlloc
CloseHandle

Sections

.text
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ