861d8a8d2da98cfb28fdbe967ee76a81_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

861d8a8d2da98cfb28fdbe967ee76a81_JaffaCakes118
Size

4KB
MD5

861d8a8d2da98cfb28fdbe967ee76a81
SHA1

61854714c84ddd9ee8740d19a6e83340bbbba4df
SHA256

3ee92c7c112db6e0aca26c94710c15888747edbb4c856dfe3b0e127d8a6b0e42
SHA512

bff387faf46ef79ab3190e5afbc13cffc86084e41b69a0561651d4a3f56346bc7960194f5e2eb8a9433a2934c4564f448c547c1225a319030d766ef890147a78

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
861d8a8d2da98cfb28fdbe967ee76a81_JaffaCakes118

Files

861d8a8d2da98cfb28fdbe967ee76a81_JaffaCakes118
.exe windows:1 windows x64 arch:x64

104e3844f7d26941e527c62603133eee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
VirtualAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE