9a0ca64655d9b0f4acd59d47eb1c6680_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a0ca64655d9b0f4acd59d47eb1c6680_JaffaCakes118
Size

4KB
MD5

9a0ca64655d9b0f4acd59d47eb1c6680
SHA1

12981c1cb0ed6fcde1e465bbbee60dbfeadbe82d
SHA256

b0e4f70f0b6f6acf51baeb4f5281a8bff80518686ffe4159133e98c656ff26c0
SHA512

6dfeff8003d4032073f71b93de3fee51710837e07104e6ff1764b88571552fef55f30825f31b45f308adf5939374b45a56b4ab15a03298ed52cebf9e3958921a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a0ca64655d9b0f4acd59d47eb1c6680_JaffaCakes118

Files

9a0ca64655d9b0f4acd59d47eb1c6680_JaffaCakes118
.exe windows:1 windows x64 arch:x64

104e3844f7d26941e527c62603133eee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
VirtualAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE