d08ad25594e33b85a4af34c3940c1c4e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d08ad25594e33b85a4af34c3940c1c4e_JaffaCakes118
Size

4KB
MD5

d08ad25594e33b85a4af34c3940c1c4e
SHA1

b533ca235bc523d0a4b55dda8a3a8e7c34413d44
SHA256

24daa80d7dfaf9fbce08d141c61d4e2d002366fb2150458c7adcf67b766d0e03
SHA512

2c9454d933093a2f440d8f38a671a4dde3a34c20c6f0d8d179e1835bc70d78bdb2a03accfd30b55a8ed4646c895e0f3b45e703812fa9dcd3c2a13c1cd0dbc9ff

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d08ad25594e33b85a4af34c3940c1c4e_JaffaCakes118

Files

d08ad25594e33b85a4af34c3940c1c4e_JaffaCakes118
.exe windows:1 windows x64 arch:x64

104e3844f7d26941e527c62603133eee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
VirtualAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE