2a0fdb3248cd1528871de2691d131ec8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a0fdb3248cd1528871de2691d131ec8_JaffaCakes118
Size

4KB
MD5

2a0fdb3248cd1528871de2691d131ec8
SHA1

eb5945443d2b81575af75c1b39f68ace0282c526
SHA256

5f52c6d2e226eb0b8f09c641afd293922e44e15ddb8a77b63d1477c83841a543
SHA512

8190c620af146b98d85b09ea5293348a359a561599e2530b98fbdd13bf9345159887eed75f25e6b99c48a558cd3417161eb2754f2bf6f2236693ca4be9c92079

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a0fdb3248cd1528871de2691d131ec8_JaffaCakes118

Files

2a0fdb3248cd1528871de2691d131ec8_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e73faf584d28aeda8b8cd6a5a585c2f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc

user32

MoveWindow
PostQuitMessage
ShowWindow

Sections

.zxdae
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dacre
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.das342d
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ