b837f0e11432d3828cb8e3140d2bd598_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b837f0e11432d3828cb8e3140d2bd598_JaffaCakes118
Size

2KB
MD5

b837f0e11432d3828cb8e3140d2bd598
SHA1

ab9eda157d611c1194b54cfdb941d643f5d24960
SHA256

24286145291ea96efc271e5d222d033cff72c547c717c1ea78d3c9462cfdadf6
SHA512

5b736114a8a8992ffc9dad67bb9bfb20f4c2177a17d8edfecf60f790cfb342f782fdade6d2a40e7c54455f280653c1596a296d92fedf9c35f0969ddd23b23f98

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b837f0e11432d3828cb8e3140d2bd598_JaffaCakes118

Files

b837f0e11432d3828cb8e3140d2bd598_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c646fd8044a60256cbc83ad63bc61ae6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

kernel32

WinExec
ExitProcess

Sections

.text
Size: 512B - Virtual size: 78B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 251B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE