3f25e30b6e0c09d3ae42daad2dc674d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f25e30b6e0c09d3ae42daad2dc674d8_JaffaCakes118
Size

2KB
MD5

3f25e30b6e0c09d3ae42daad2dc674d8
SHA1

7899c77d362e281f90c1343524879569cc20d96e
SHA256

068608774974f2ce78830e569c9b66c8eda21c6a99f870e1ca928dbdbc05513e
SHA512

c393de617f0eac2847959b75760db9777e9c68d6d2c42af0249f0cfe3b88870c3f8b825a433ccbcae236b9548cd25d0bca30b7a2282544bbf7a69cbc609a4644

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f25e30b6e0c09d3ae42daad2dc674d8_JaffaCakes118

Files

3f25e30b6e0c09d3ae42daad2dc674d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

77f2371ce8e8da1e2f4734cfcbb1df94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

urlmon

IsValidURL

Sections

.text
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE