8436a97956aa5b8b3202756efd6052d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8436a97956aa5b8b3202756efd6052d3_JaffaCakes118
Size

2KB
MD5

8436a97956aa5b8b3202756efd6052d3
SHA1

dd27b1fcdecb79899f1f3d2b0cfffe35cd502c4c
SHA256

4f1314ccdb9c6f8569feba954a58f3dd501a97d4de22b6ea6e5b603351105127
SHA512

d12d3833599e66187d21a40146ee8442161360d461c0d437d912d081b573586b4065e91c626961ded91a5bed96b96d006a486167543f3678eede4050c46a3762

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8436a97956aa5b8b3202756efd6052d3_JaffaCakes118

Files

8436a97956aa5b8b3202756efd6052d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d971e8ad2e128430e1d9b8668ec7686

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
ExitProcess
GetModuleHandleA

Sections

.text
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 256B - Virtual size: 142B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ