ef9c3e53f05300a9c4bd0796f647d9cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef9c3e53f05300a9c4bd0796f647d9cc_JaffaCakes118
Size

3KB
MD5

ef9c3e53f05300a9c4bd0796f647d9cc
SHA1

48ef942a09dde957ee819700f71ea13b937b44e9
SHA256

a02691b643cb5ccde851ac5a816c48f1833528d803917f81175d68638d6df568
SHA512

c6b4090a03248f3829dc9f9e4b0b1a45586c4fc8ccb9dd9b668f2211b22cb048f651a6efddfc00cf481928eebb4e276750ada39f652e90359bbaf796757e37f1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef9c3e53f05300a9c4bd0796f647d9cc_JaffaCakes118

Files

ef9c3e53f05300a9c4bd0796f647d9cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3746289c4eaccde50b67772f5be2fb9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
QueueUserAPC
SleepEx
TerminateProcess
CreateThread

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ