488e9892cf419dd341d9f09aef787278_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

488e9892cf419dd341d9f09aef787278_JaffaCakes118
Size

3KB
MD5

488e9892cf419dd341d9f09aef787278
SHA1

d05e55836df56e2639590eeec7b37bd7bc2e693e
SHA256

0050b74f0cd6384159bca0bde0279daabc4c2fb1b0c5a7e7dbd6af9485f215b7
SHA512

710a7efd157fe5cbfc22c9aa02899d7c27c5d1dd9740824631d614dba6228e13586f30bbbf08580779f4c6782b4d68361cd487abd9b285a15d68378664e345d1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
488e9892cf419dd341d9f09aef787278_JaffaCakes118

Files

488e9892cf419dd341d9f09aef787278_JaffaCakes118
.exe windows:4 windows x86 arch:x86

321f87e57c31e5d5cb7c3625355ff74d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GlobalFree
DeleteFileA
Sleep
GetCommandLineA
GlobalAlloc
WideCharToMultiByte
MultiByteToWideChar
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 822B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE