cfc1f695a1f1d3ba3a2d9601f0395157_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfc1f695a1f1d3ba3a2d9601f0395157_JaffaCakes118
Size

4KB
MD5

cfc1f695a1f1d3ba3a2d9601f0395157
SHA1

82cb93bd3f8a3404b571b4918b03d37dda860c75
SHA256

c36da40addcd376f14c23b8e3e63b1aa3d258d5041b11ad8bb86e17579eccecf
SHA512

5dddfec40fb85cd99f7bda542351f64ccb13d7c9b0698bb804e04a741e17bf33017aba5fe7e649e15214e7ebebbca493464a95c0d4ed422bf2edeec12b95d89b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfc1f695a1f1d3ba3a2d9601f0395157_JaffaCakes118

Files

cfc1f695a1f1d3ba3a2d9601f0395157_JaffaCakes118
.exe windows:1 windows x86 arch:x86

98c88d882f01a3f6ac1e5f7dfd761624

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ExitProcess

user32

MessageBoxA

Sections

CODE
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ