8e1454fa5fa2c21a04afd08838ac6e72_JaffaCakes118 | Triage

Sharing

General

Target

8e1454fa5fa2c21a04afd08838ac6e72_JaffaCakes118
Size

2KB
MD5

8e1454fa5fa2c21a04afd08838ac6e72
SHA1

5dabbb8042239088e9d198d82a537e852f1baf9a
SHA256

d84754c6525008e4078686b84670b31274defcb6212c1c144a79df28e69395ad
SHA512

cadd3a1af5bbf9cff5b9698fe5fc2cb5390a91acc81eaa78518443fb443a32817251e59b36ce26e7fbd11729ca69a29d2989b13598fd6bc540baf7644acdcf3a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e1454fa5fa2c21a04afd08838ac6e72_JaffaCakes118

Files

8e1454fa5fa2c21a04afd08838ac6e72_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dde36495627f95fd3e6fd763fe3d2bb3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

_snwprintf

urlmon

URLDownloadToFileW

kernel32

GetTempPathW
ExitProcess
GetTickCount

Sections

.text
Size: 512B - Virtual size: 193B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 366B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE