3d9b9bf564d4174be8405a393d3d76a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d9b9bf564d4174be8405a393d3d76a4_JaffaCakes118
Size

3KB
MD5

3d9b9bf564d4174be8405a393d3d76a4
SHA1

2182a95adc84ea7ac97cc3104e1ba82434bc73a6
SHA256

81cda4371cb0ed038a680227fe327d5485856962d62ce847e840fc4758551304
SHA512

75e2aa78fc56e49e8959577e34046d5ccc9c9d2eaab488d3e5654caf7a207d3cb20eea1e155d44f9e931a47e8fec0f9be6b7a03bba3f4effa5c74b9ad1428fa5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d9b9bf564d4174be8405a393d3d76a4_JaffaCakes118

Files

3d9b9bf564d4174be8405a393d3d76a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3746289c4eaccde50b67772f5be2fb9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
QueueUserAPC
SleepEx
TerminateProcess
CreateThread

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ