18448afefe1e6f7eaff8b7cfe80cda8c_JaffaCakes118 | Triage

Sharing

General

Target

18448afefe1e6f7eaff8b7cfe80cda8c_JaffaCakes118
Size

3KB
MD5

18448afefe1e6f7eaff8b7cfe80cda8c
SHA1

27b3f294129a7dce58bd90c07033683906a89fe9
SHA256

968f745930d7b6fc82ad78b3e16196e2e117a15af300dd40784eb9d8a8779ee5
SHA512

8a665e456b0bcdcf34fc9c1c312448cbe5a69acebedd2c80d1fe21973a18ea2f104fc27b5f2ac490574785a7194e06dce03cb88f10a4aa5cd52be8f1e4a64c8d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18448afefe1e6f7eaff8b7cfe80cda8c_JaffaCakes118

Files

18448afefe1e6f7eaff8b7cfe80cda8c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

272a37fa8c15284398a5abe0ff041b38

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
VirtualFree
WriteFile
LoadLibraryW
Sleep
GetModuleFileNameW
CreateFileW
GetProcAddress
VirtualAlloc
lstrcatW
CloseHandle
lstrcpyW

Sections

.text
Size: 1024B - Virtual size: 907B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 406B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ