036e8723818e76047c71c786d8f34124_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

036e8723818e76047c71c786d8f34124_JaffaCakes118
Size

4KB
MD5

036e8723818e76047c71c786d8f34124
SHA1

accf46a557e1eed856b5d2fa8dd6ed37a41d2711
SHA256

e8824a64164444b7707cdee215fea7706397ff498520bf1a6a501cacba7e51e6
SHA512

195099bfa9f1e3528c1e0c3ad83bfab00de2f18d48d5e991d1f1a44b8b4ccb79a505bfa73c1d70b4d7c1f1521bf3feada89ea94ded8106d5fe50eb0ed8fdc96f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
036e8723818e76047c71c786d8f34124_JaffaCakes118

Files

036e8723818e76047c71c786d8f34124_JaffaCakes118
.exe windows:3 windows x86 arch:x86

c1083278ed6321b2fc0f39b45bc8b74b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
Sleep
VirtualProtect

user32

MessageBoxA

Sections

.text
Size: 512B - Virtual size: 95B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 185B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE