f07c513497a974b47a3a2fc80c038729_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f07c513497a974b47a3a2fc80c038729_JaffaCakes118
Size

2KB
MD5

f07c513497a974b47a3a2fc80c038729
SHA1

cd87969e7120376ba361e41173ea8c909dab558d
SHA256

91ad571fd14e4a1b82fc9fba73569a9c883d311159e55b7fc08c6349294fbde4
SHA512

8bf143bd5bb64eb4fd3d7f889c138be05c4ede54ccab7c36200a73d7718409031c6a0404a4548fe79ab287f5eae7f4e48ef6d10114a24d1db57f056eb240f70b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f07c513497a974b47a3a2fc80c038729_JaffaCakes118

Files

f07c513497a974b47a3a2fc80c038729_JaffaCakes118
.exe windows:4 windows x86 arch:x86

57ca424fa1bc6afa2709eb1d184aa2d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateToolhelp32Snapshot
ExitProcess
GetProcAddress
LoadLibraryA
Process32First
Process32Next
Sleep
WinExec

Sections

.text
Size: 512B - Virtual size: 411B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE