0bf267a3f3a1c9477aa256b1499a0d99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bf267a3f3a1c9477aa256b1499a0d99_JaffaCakes118
Size

3KB
MD5

0bf267a3f3a1c9477aa256b1499a0d99
SHA1

a7e9ef9b7f0dbb2a29321b16d3d5124e6d129de4
SHA256

d2f89a759b9dfb800bd3aef90efca6255f30e0f898dcf02b936590adda1fe147
SHA512

3e0f4853c39f5b27d14590db829b5288592e8043725ff8cb500e9c89e837232c1b1e099a9480c5ce6e906dcf6a6aaf934debe61c4434b5bcf4ec792f5c54cc22

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bf267a3f3a1c9477aa256b1499a0d99_JaffaCakes118

Files

0bf267a3f3a1c9477aa256b1499a0d99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72f8b6cac57eab7cacc9e828a4895b41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetModuleFileNameW
GetModuleHandleW
QueueUserAPC
SleepEx
TerminateProcess
CreateThread

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ