c84c59a929f5b9c90cdc08081b38c2ed_JaffaCakes118 | Triage

Sharing

General

Target

c84c59a929f5b9c90cdc08081b38c2ed_JaffaCakes118
Size

4KB
MD5

c84c59a929f5b9c90cdc08081b38c2ed
SHA1

a14aaa51ccfe4b0799dd6908b43f4ec9d6368000
SHA256

e1607f6c747061d5bd1e29d32ea66009f4e03e7b35f2126e01d0fa4964230311
SHA512

233c7021b0e6886965e61e72b07508bd3f0d2cb648471f76d062562838bccbd7a9fc99a9ab3adc51f39dd9f6bbd757fcf4ef5697a0e08e293f633e7479ba4454

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c84c59a929f5b9c90cdc08081b38c2ed_JaffaCakes118

Files

c84c59a929f5b9c90cdc08081b38c2ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

80e137dbd57e9295d8184a7d6c03bc24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetStdHandle
WriteConsoleA
Sleep
GetLocalTime

urlmon

URLDownloadToFileA

Sections

.text
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ