83bb4960070011186b5f0613da6adc5c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83bb4960070011186b5f0613da6adc5c_JaffaCakes118
Size

3KB
MD5

83bb4960070011186b5f0613da6adc5c
SHA1

afbd772901b128f9e0bdc9c72b405df183b5f38f
SHA256

1caddb1a838f2f146161d43f7f591e6345c59ab65a5bb976e4b4dc4200d59407
SHA512

0b7cb2579fdce3d0ea44b4e2cf34a6725921d79cae2b2b743bb1d71d6f4cbec9980d7a959cbe4c5f8f32e4e71f25e934b2dd9c79a6567767857e0b516aafd607

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83bb4960070011186b5f0613da6adc5c_JaffaCakes118

Files

83bb4960070011186b5f0613da6adc5c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72f8b6cac57eab7cacc9e828a4895b41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetModuleFileNameW
GetModuleHandleW
QueueUserAPC
SleepEx
TerminateProcess
CreateThread

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ