f5a8caeee65bd153bee981f6ec0d0d71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5a8caeee65bd153bee981f6ec0d0d71_JaffaCakes118
Size

2KB
MD5

f5a8caeee65bd153bee981f6ec0d0d71
SHA1

c3eb9937c07c3a1361d694e922ded5065e0dda93
SHA256

8c1ec2be7d51c56461a6dee665a0862abde06d8df47e041d126321b21eca8906
SHA512

4a4d9cae311e1abc30b82d813fe8096ba85bbd8efbf0a5af903b3c1f90fbae476d36058d349908b19a380ae9ea184db5f197022f04972968b21a6135aa286b43

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5a8caeee65bd153bee981f6ec0d0d71_JaffaCakes118

Files

f5a8caeee65bd153bee981f6ec0d0d71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

028ad07e6447616cbbfef8fe4f6c232a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
SizeofResource
LockResource
LoadResource
FindResourceA
CreateThread
VirtualAlloc
HeapAlloc
GetProcessHeap

Sections

.data
Size: 1024B - Virtual size: 518B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ