435e292e2982828d230d0fafa7194c80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

435e292e2982828d230d0fafa7194c80_JaffaCakes118
Size

2KB
MD5

435e292e2982828d230d0fafa7194c80
SHA1

153d3efeabb81d7a73eafe1496d0c27b3b5b4b86
SHA256

b0534054b2b2411bf15e2387dc44ea9266cdb87a2a57e0325e749a6dc93a595a
SHA512

d1a4684c3af3579928cc39ba5c624a81c012f2ba114c4ec082eee0f1f77319ef55f5181a42f6a9088c73d085345419f0ab98ac6cf4111e1676c5e96dfce4ccd1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
435e292e2982828d230d0fafa7194c80_JaffaCakes118

Files

435e292e2982828d230d0fafa7194c80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.text
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 133B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE