67b67c44e01f651ad8a2a328976274b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67b67c44e01f651ad8a2a328976274b4_JaffaCakes118
Size

3KB
MD5

67b67c44e01f651ad8a2a328976274b4
SHA1

5b34073c113a6a9079944c103227d2d6720a8f66
SHA256

57cd9ead38577cb22b42ec6bbecd84691b6ab2c7793414b47bac47c555eb03c3
SHA512

c8a84689bb856532b31f1d245661f60113b76c7fa5e667ab25e1ac1f6e8fe9380a5e811dd9be5dd60df32cb95d64ec333c2eb719a9c4e87c9a10b32bfe72d2e9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67b67c44e01f651ad8a2a328976274b4_JaffaCakes118

Files

67b67c44e01f651ad8a2a328976274b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3746289c4eaccde50b67772f5be2fb9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
QueueUserAPC
SleepEx
TerminateProcess
CreateThread

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ