2fda91ebd065eaa8eca6d3dc2fd87501_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fda91ebd065eaa8eca6d3dc2fd87501_JaffaCakes118
Size

2KB
MD5

2fda91ebd065eaa8eca6d3dc2fd87501
SHA1

82117327e17124a20bbf062b72c1402b0b8f8709
SHA256

d8b72c0aff5095c4d824398b321baf28a10293e86db6896af4d6dda8c6f1ffce
SHA512

21e923780c50b4c3fe2909169aaac14a80a31461dd3c348b543a1064e757d5ed062d626055c5657b933b2074c437fe983077075626c2e157a33149b06f2e21a7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fda91ebd065eaa8eca6d3dc2fd87501_JaffaCakes118

Files

2fda91ebd065eaa8eca6d3dc2fd87501_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3746289c4eaccde50b67772f5be2fb9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
QueueUserAPC
SleepEx
TerminateProcess
CreateThread

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 242B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ