dd4c4a1e55c3a35c3cd701e901455787_JaffaCakes118 | Triage

Sharing

General

Target

dd4c4a1e55c3a35c3cd701e901455787_JaffaCakes118
Size

2KB
MD5

dd4c4a1e55c3a35c3cd701e901455787
SHA1

7106acea0fafc875c92e9fcc476245b43ada1b86
SHA256

8bcdb2bb40f2a7f056e931cce4685eddfa5f86f74c3882f067fb3044ed71fa5c
SHA512

a90e1d4696a1d5f1b0d616018ddf684039b7012952169e30d602ef1805ae8703f2c6b3a9f0ccf3a7e3e15c5eb2c93ffc54570ee35d45642787eaf32df0ebe015

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd4c4a1e55c3a35c3cd701e901455787_JaffaCakes118

Files

dd4c4a1e55c3a35c3cd701e901455787_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e616c9e84d2b3753caf6b0504178e0c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
lstrcpyA
CloseHandle

user32

wvsprintfA

Sections

.text
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 238B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE