1968562e8eab7f70160b594137797d5d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1968562e8eab7f70160b594137797d5d_JaffaCakes118
Size

4KB
MD5

1968562e8eab7f70160b594137797d5d
SHA1

15f305102471ff8c121f0677b2ec77519e14cb1e
SHA256

c7aefdd623008a01b27d6bff9cbbc617661b896fa1572d324ffe6e8af3026159
SHA512

35207b1335f5eb2ece3e99dad3cf5e7c7bcbdb86c47a256819fbe9c31b0a1b2648a2b40e15a3bceb94d05c937031fd9ca4047be1004ad97dd92532402b03978a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1968562e8eab7f70160b594137797d5d_JaffaCakes118

Files

1968562e8eab7f70160b594137797d5d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e82dd51b077167be63c004bed23d0c1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

Sleep

Sections

CODE
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE