15063b6156fd6eb26d424d9d54ebe596_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15063b6156fd6eb26d424d9d54ebe596_JaffaCakes118
Size

3KB
MD5

15063b6156fd6eb26d424d9d54ebe596
SHA1

d69f19fa9b6eb10116755136fafa7feea0210ded
SHA256

6d56922632ae0a88d2583105d7c9cbd283a741dba5d47caa9cdff37556d1dba4
SHA512

0a2dbff617a187a332f91b7736ef5fce621632c75651f131697bf288dee1caa03426b5855a1aee05b3a853b49ed7046a70d5875063644acbc2a6d86a5f048a10

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15063b6156fd6eb26d424d9d54ebe596_JaffaCakes118

Files

15063b6156fd6eb26d424d9d54ebe596_JaffaCakes118
.exe windows:4 windows x86 arch:x86

27bfadfaaad42c8453a18aa7a3178776

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetProcAddress
LoadLibraryA
lstrcatA
lstrcpyA

user32

CharLowerBuffA

Sections

.Yoga
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE