eeba84e007172279facbaa9a227886b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eeba84e007172279facbaa9a227886b3_JaffaCakes118
Size

2KB
MD5

eeba84e007172279facbaa9a227886b3
SHA1

2883453a5669682de42862dfb6351a12f22ca970
SHA256

f31e144338cf1706740452696b39ea2425b45a898399a0c9654af14a09252d90
SHA512

7f9a63d3e422d7ba88d2e824d24f908f522d38abb143aad3e491d797c32b47f8b30027b8b4c25209150d922a8300edfc36f2baa71ccf4f85c6841fc3c9265f0f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eeba84e007172279facbaa9a227886b3_JaffaCakes118

Files

eeba84e007172279facbaa9a227886b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9951ea482cdf88d83ed64c8866836e90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ExitProcess

Sections

.text
Size: 512B - Virtual size: 34B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE