d567978e8bb7474bbab01134c803f516_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d567978e8bb7474bbab01134c803f516_JaffaCakes118
Size

2KB
MD5

d567978e8bb7474bbab01134c803f516
SHA1

ba08ddca930a1a4044520c830ec674f3c25a1198
SHA256

2faa595429e197119814a4da4c0e3e2a09eb8a406ef8658babe61473215114cf
SHA512

4821acfe13c73750ca4dba0a9b6dcbaa00f22fe25977392986629ec50958126f260085d5b6e22f8da4ea5653cf7d9388a74a5328f38771f6ffd9b73247377e25

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d567978e8bb7474bbab01134c803f516_JaffaCakes118

Files

d567978e8bb7474bbab01134c803f516_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9ade0aa18f660a34a4fa23392e21838

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

Sections

.text
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ