356aa22b3a22b5b0287419e7ecb4979f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

356aa22b3a22b5b0287419e7ecb4979f_JaffaCakes118
Size

4KB
MD5

356aa22b3a22b5b0287419e7ecb4979f
SHA1

e762f8c2bae6fce2787698af50ee06d9539b7b58
SHA256

8b5051e6448feadb9c7632bf7d3c572ffaeaa1a44cc4df55bfa941f41be16d95
SHA512

1abbbe8b28a84b0bb26f667287099ba485527eabdffedf0abcf30cd15adcf11c42505653baa21c37d017586894c05598a0b2d8c692b2a4a45b69bedfebf48491

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
356aa22b3a22b5b0287419e7ecb4979f_JaffaCakes118

Files

356aa22b3a22b5b0287419e7ecb4979f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b70dbf424314061d7c55b9ede2b18f49

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CloseHandle
WriteFile
CreateFileA
LockResource
SizeofResource
LoadResource
FindResourceA
GetProcAddress
GetModuleHandleA

Sections

.data
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ