01471f2434ff9b605ad900f6dacf4890_JaffaCakes118 | Triage

Sharing

General

Target

01471f2434ff9b605ad900f6dacf4890_JaffaCakes118
Size

2KB
MD5

01471f2434ff9b605ad900f6dacf4890
SHA1

ee804afc0fd9f4738891f3c968883fd0a6af086d
SHA256

d5134937d20c7737368655c35220d4392e12a2e5c36d8536669b034f5297fe9f
SHA512

90ba3d16f774be012425f6dee0fe954e042572a8165dc2c4bdf6bf4fbf2ab9d758eab31d6a394c6eaa2238748c234c4607036ea34948eb5217d37925fb3a6f1f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01471f2434ff9b605ad900f6dacf4890_JaffaCakes118

Files

01471f2434ff9b605ad900f6dacf4890_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4afc596e677872a5ef6d27ddd953788c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
fopen
fseek
ftell
fread
strlen
fwrite
fclose
_controlfp
__set_app_type
__getmainargs
exit
_XcptFilter
_exit
_except_handler3

Sections

.text
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE