8e691e9e576877bd4023f76768c3d40a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e691e9e576877bd4023f76768c3d40a_JaffaCakes118
Size

3KB
MD5

8e691e9e576877bd4023f76768c3d40a
SHA1

9bc40877031d881ba8b08f85e7e9197bf71ca913
SHA256

0d3eeee5ef04008a33ca4fb5516deb46fe9062671bfa286fb6c44f5fab184b9f
SHA512

61e0d05a36e576e181c54747f54ee6c0b9ff7d0779e418254235ad9852ac808a08849963996e8f611dcd99bf6d8225ce5cb9b25ae683a5875729d235892b0a44

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e691e9e576877bd4023f76768c3d40a_JaffaCakes118

Files

8e691e9e576877bd4023f76768c3d40a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

321f87e57c31e5d5cb7c3625355ff74d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GlobalFree
DeleteFileA
Sleep
GetCommandLineA
GlobalAlloc
WideCharToMultiByte
MultiByteToWideChar
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 822B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE