d5b32338b78ac738ba56be342b978f08_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5b32338b78ac738ba56be342b978f08_JaffaCakes118
Size

3KB
MD5

d5b32338b78ac738ba56be342b978f08
SHA1

170a28ddd3e1c6944a79078ca999d8badffca07d
SHA256

1b717e3899b97a226a8b5e7317e1a2b1a71eff92c421d34eb82c75d635922928
SHA512

3409dbaabe54c4efbc611160bca47e7d78e3e9576c71e62f417350290b08b4104b50b098ff99d1c9e717206d8dad9084e191d0987b86c53474bb2bc88bc4ba62

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5b32338b78ac738ba56be342b978f08_JaffaCakes118

Files

d5b32338b78ac738ba56be342b978f08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3746289c4eaccde50b67772f5be2fb9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
QueueUserAPC
SleepEx
TerminateProcess
CreateThread

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ