57362570b0fdb27e8bce0aa1d4c2f1ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57362570b0fdb27e8bce0aa1d4c2f1ac_JaffaCakes118
Size

4KB
MD5

57362570b0fdb27e8bce0aa1d4c2f1ac
SHA1

5388dda12ed5b94abf7b2175361f27c6ef037f37
SHA256

9ec17f201ad21bf3c6cbc280f1042914f7e73a27c0e1bf97aa4558485e54af62
SHA512

31333ac27ab2be623f5b424408a17ac8613fa89dfc866eb1b52d63cf18d72a59ccece078524a0b05c8c1366a6518c47dc311d5ccc2684d4e5b5bd3ad320393c3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57362570b0fdb27e8bce0aa1d4c2f1ac_JaffaCakes118

Files

57362570b0fdb27e8bce0aa1d4c2f1ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SMT//SMF
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE