6543b4cc4bf46b6b445ff225e05ee358_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6543b4cc4bf46b6b445ff225e05ee358_JaffaCakes118
Size

3KB
MD5

6543b4cc4bf46b6b445ff225e05ee358
SHA1

455d29b2784b873063a63ec40002a541431df2bc
SHA256

d97a9befb74c530fda275ffcc675bf2d8651eecd189cc7be7f58eacad4a375bd
SHA512

dd540f5f1811f6af74466196fa896b9bb3849912cd5b68716881bb731faf74482beb3346631b514340ec3ced3c53fc78fb67b60eb65bdabe5b7879098877d511

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6543b4cc4bf46b6b445ff225e05ee358_JaffaCakes118

Files

6543b4cc4bf46b6b445ff225e05ee358_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3746289c4eaccde50b67772f5be2fb9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
QueueUserAPC
SleepEx
TerminateProcess
CreateThread

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ