0feb1832e38e9ba7e370f3a5c44771b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0feb1832e38e9ba7e370f3a5c44771b8_JaffaCakes118
Size

3KB
MD5

0feb1832e38e9ba7e370f3a5c44771b8
SHA1

7c5a20e6eaa32d97085666fffd77954a8b6355ac
SHA256

d1073a6c09c56a407da471be36e0aebfb9c9206a74b0607eb23b706762cdd642
SHA512

c69c88c0952c9d4f3bace9c9ad1978ebc467100409b0bb01fba2488b0c100f9df8c5bed60dca2182b4e00838953746eeef41976873dabfc00db81bc048348e0b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0feb1832e38e9ba7e370f3a5c44771b8_JaffaCakes118

Files

0feb1832e38e9ba7e370f3a5c44771b8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

__ReadFile@12
__WriteFile@12

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.icode
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mtemp
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.etable
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 838B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ