0c3f8500641a847081819fe820382544_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c3f8500641a847081819fe820382544_JaffaCakes118
Size

2KB
MD5

0c3f8500641a847081819fe820382544
SHA1

b793a0b95055b594e71d9dfece7cf4088a3db87d
SHA256

c096172fa7c9cc0027cae4084acd88a579318a05f289e4539044deea1837219a
SHA512

0af59133f06fcacd7abb7af1bfc651e190e42eaa001bfae473802b4203192f3fd45b207134589131575a362c0cb605d2bea489d9bd12a353e0655a937ebc95aa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c3f8500641a847081819fe820382544_JaffaCakes118

Files

0c3f8500641a847081819fe820382544_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9951ea482cdf88d83ed64c8866836e90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ExitProcess

Sections

.text
Size: 512B - Virtual size: 34B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE