0eb249d3558de8c72677e407073b6785_JaffaCakes118 | Triage

Sharing

General

Target

0eb249d3558de8c72677e407073b6785_JaffaCakes118
Size

2KB
MD5

0eb249d3558de8c72677e407073b6785
SHA1

6979f0cdcef7d18c5e79eec35d1f139aa5a11541
SHA256

21c8d9814155ff46b4078bc9be6e729a6ed8a203a8a51738be60a5338fd3e308
SHA512

23a3eb5951bfa5eb5067d55916ce380cd71df8e96ba00157c903faa416391b32ef2b70ea367ad7207f803d0d53123408eadf1123f0eb52cb4439165a433d77b6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eb249d3558de8c72677e407073b6785_JaffaCakes118

Files

0eb249d3558de8c72677e407073b6785_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.text
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 98B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE