0fc8f82dc1825e01c2bcaf8e6bc9a113_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fc8f82dc1825e01c2bcaf8e6bc9a113_JaffaCakes118
Size

4KB
MD5

0fc8f82dc1825e01c2bcaf8e6bc9a113
SHA1

a1153d4539516095f8b9c4c0a4fe1b9e684a23e4
SHA256

d24c5b77bfdcfbfd5bade47ab7a8181d93514f11ea34cd5a819a2b8e496a415c
SHA512

b1a6514430da25617df279b9ad06ba7c3a098cad87582a12c1beb2d916d4b1ad54be3a16a364be6ae80310729ef909f82119900f9b2d2a7666df42b5c9032bbe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fc8f82dc1825e01c2bcaf8e6bc9a113_JaffaCakes118

Files

0fc8f82dc1825e01c2bcaf8e6bc9a113_JaffaCakes118
.exe windows:1 windows x64 arch:x64

b2fbec151d244fceb94b197d3015702d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc

user32

GetMessageA
TranslateMessage

Sections

.flat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

api
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE