8b48dc0cfcdc39ad6c69760734b80703_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b48dc0cfcdc39ad6c69760734b80703_JaffaCakes118
Size

4KB
MD5

8b48dc0cfcdc39ad6c69760734b80703
SHA1

9684e2ddf10117552c29cb2bb73a005c956c4340
SHA256

56640ccb54b18fe5da8b576f431cfb54ccc8abb9f3736dfacb3e933821d40520
SHA512

72293406fb5fa1955afe1f5699fc2a3d91b06622c00b423c16b971fd80d42d853009fcac39bf701274697db633744bb85461e94b055df8f0c04728c889168479

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b48dc0cfcdc39ad6c69760734b80703_JaffaCakes118

Files

8b48dc0cfcdc39ad6c69760734b80703_JaffaCakes118
.exe windows:4 windows x86 arch:x86

80e137dbd57e9295d8184a7d6c03bc24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetStdHandle
WriteConsoleA
Sleep
GetLocalTime

urlmon

URLDownloadToFileA

Sections

.text
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ