14e9b15cc1085b11ed12e9daf9e9ba93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14e9b15cc1085b11ed12e9daf9e9ba93_JaffaCakes118
Size

3KB
MD5

14e9b15cc1085b11ed12e9daf9e9ba93
SHA1

d97e789bcd211d0c7979a44c91d02295034943b6
SHA256

fdb5d7a96c6519f0500c4acb3cb135bd633cce8f641e2b679f4c00a560afbb4b
SHA512

4915e6414c90e55568534bf9f88689ae59b100935dd2be9afca4a23688c5a5ad1443992e97657cfbb6d29237172bec360c2219aaaf1a3d2fa931025ea1744149

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14e9b15cc1085b11ed12e9daf9e9ba93_JaffaCakes118

Files

14e9b15cc1085b11ed12e9daf9e9ba93_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0ec4053ee6878018f4f8bb972f8738e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateMutexW
LoadLibraryW
Sleep
GetTempPathW
GetLastError
GetProcAddress
CloseHandle

Sections

MiniPE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ