3b428e1c9d7554a34476f4bf36456239_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b428e1c9d7554a34476f4bf36456239_JaffaCakes118
Size

4KB
MD5

3b428e1c9d7554a34476f4bf36456239
SHA1

ca70acaf666a05f7e201f713deb5ddb1a1e789eb
SHA256

bb3d3cf64967d9c5ec0682a26903fdb6958967b541db66eedc7dea6d9bdadc07
SHA512

b9773042854493c82aed4813ca1b3c1784937f7f597466892426f9c2e022d233f3bd05959f2c4ed8e84ff3e325e7991d2c250dad8dd926124ecdafbd75d15640

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b428e1c9d7554a34476f4bf36456239_JaffaCakes118

Files

3b428e1c9d7554a34476f4bf36456239_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d8572460af682686b6b1144b9964002

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
ExitProcess
GlobalFree
GetCommandLineA
GlobalAlloc
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
GetTickCount

Sections

.text
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 322B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE