dc4e2c369dca125d5fc45f5cf4d8d325_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc4e2c369dca125d5fc45f5cf4d8d325_JaffaCakes118
Size

4KB
MD5

dc4e2c369dca125d5fc45f5cf4d8d325
SHA1

e4ff42e08da0bce4bc7079b0587a5daefb66e679
SHA256

4569bd985cc8ad0e2dd424fa2fc17d3b8e6707b260de09d042b2cdc597e06e2e
SHA512

884f1ad13b98b52c45333c724a7cdad6d5665e7d242cd54751f7f3f213f162551b970b726f83440b869177ce2894e05d82dc3bc6107d321ab0f9b927d69d3b3c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc4e2c369dca125d5fc45f5cf4d8d325_JaffaCakes118

Files

dc4e2c369dca125d5fc45f5cf4d8d325_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e884b31e8e607b0f2c8df90f116983fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
ExitProcess

Sections

CODE
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ