fa668b1ad6e0f880c5f19df69c9eb682_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa668b1ad6e0f880c5f19df69c9eb682_JaffaCakes118
Size

3KB
MD5

fa668b1ad6e0f880c5f19df69c9eb682
SHA1

c4dd1c87027794c565f9a1e68b903c7cb7fe056f
SHA256

dfc3ed0b7e78eecfe0efa83893f280feb7acb0ad9507ac3c81642d0ec9f4abe5
SHA512

92c29f4246ecb35aeb896096e36883caff1a8cc93c5d5cf5f3b95dc038beba7c06475f0ede3b2a1ba42ebe30d6d05dd548c310a6aa5958855dba023333e3d760

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa668b1ad6e0f880c5f19df69c9eb682_JaffaCakes118

Files

fa668b1ad6e0f880c5f19df69c9eb682_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE