40e42300270c7f3755d6146f607e6351_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40e42300270c7f3755d6146f607e6351_JaffaCakes118
Size

2KB
MD5

40e42300270c7f3755d6146f607e6351
SHA1

35a17bbcb19a05a9ecaf7ab3e86035a7e56b3294
SHA256

f224a031c66e1645e9938ba02fe08950594ea15dde43a901023e8bfdccbb2eaa
SHA512

22af246393f0914b135dd8a11f7aabe138f6ccf693d6c38a4a3e4f54b7987285cfbebd0d6b988dcf6c23490fdb0514368e15197cc11cf24d06d033348c53ba32

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40e42300270c7f3755d6146f607e6351_JaffaCakes118

Files

40e42300270c7f3755d6146f607e6351_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e730fac5dcfde78db0e9957305d67d4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateProcessA
ExitProcess
GetModuleFileNameA
GetStartupInfoA
ReadFile
SetFilePointer

Sections

.text
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE