15ebc53b57bab8c6c0e85f4b6687a9be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15ebc53b57bab8c6c0e85f4b6687a9be_JaffaCakes118
Size

2KB
MD5

15ebc53b57bab8c6c0e85f4b6687a9be
SHA1

4453cd4fbe7a8c6225da33d2bca793f42ef6bf43
SHA256

957a7c426edea018613d1e3713a12c88039a9713fd2f3125d09c55b525e81835
SHA512

b5cc9ce93f63fa15a5a84414fce4ff6f635ee75219ac399251518d0fb7c9ce9700ce4c0bc5f8fa8e1a38cac6737f3aae52addad080764c054077a005b58e9e6a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15ebc53b57bab8c6c0e85f4b6687a9be_JaffaCakes118

Files

15ebc53b57bab8c6c0e85f4b6687a9be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4a6ea61a4d5437c89521c0220f74b195

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
lstrcatA
CreateThread

Sections

.text
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE