3ef64b5d081a222b87e0aad26d6df866_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ef64b5d081a222b87e0aad26d6df866_JaffaCakes118
Size

3KB
MD5

3ef64b5d081a222b87e0aad26d6df866
SHA1

cda9909439b753aae6c1324ab08834ea47ed2b0e
SHA256

c2d4cc1983b80608683b1cbc82e2e5cfae357f1a8f63af90665ca98dc9cd6683
SHA512

4648ea797adb97e1bcc5a30f93e6a6d1a76c4e9c8e145e481035d1c878fc766d9d9171c4219ce99a672974903596ea95c3840d19f0d6597940787b796b6ddc2f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ef64b5d081a222b87e0aad26d6df866_JaffaCakes118

Files

3ef64b5d081a222b87e0aad26d6df866_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb342bf1b6c5beb4513112c8a578f62a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetProcAddress
LoadLibraryA
lstrcpynA
ExitProcess

Sections

.text
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ