a1607ef804b66d2896145c01002028eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1607ef804b66d2896145c01002028eb_JaffaCakes118
Size

3KB
MD5

a1607ef804b66d2896145c01002028eb
SHA1

1f28d53e2aa79c37346acfbd90dc1ed06eee9a90
SHA256

173ae93a0abc99b608f0758204b6033e5d4c0c6c61b4dfd9bbfa68248de724ac
SHA512

80a31be7192bb291a32e6a2fcf20ba336eeb9c4bce7219c9c75ef3f602c05e45abed1f968e26e3f6fafad78450c320224650d613006812ca31bd765ebed06111

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1607ef804b66d2896145c01002028eb_JaffaCakes118

Files

a1607ef804b66d2896145c01002028eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fb342bf1b6c5beb4513112c8a578f62a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetProcAddress
LoadLibraryA
lstrcpynA
ExitProcess

Sections

.text
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ