af1c64fba5a2d9aaf344fadbb5d8b7fd_JaffaCakes118 | Triage

Sharing

General

Target

af1c64fba5a2d9aaf344fadbb5d8b7fd_JaffaCakes118
Size

3KB
MD5

af1c64fba5a2d9aaf344fadbb5d8b7fd
SHA1

81f486a6a216f4a862dfa40067f273e2c32bce75
SHA256

443ee2f7de8b738b896ab749ed08fd747391002dcbbed793f87fa171782aaf23
SHA512

d77f8432d27af13e17844fe9c171c07ff0a265dff0b1ba6d003c564cbb031a4cae71f8e7cb681aca81cf78ffe567ef6ae6e4d0716cac45477ca6b72fa81cd16f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af1c64fba5a2d9aaf344fadbb5d8b7fd_JaffaCakes118

Files

af1c64fba5a2d9aaf344fadbb5d8b7fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e3b329eec37575e5829c2e40575d633c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
ExitProcess
FreeLibrary
GetProcAddress
LoadLibraryA
HeapAlloc
GetProcessHeap
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

user32

wsprintfA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 362B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE