2ebc7bfa00ad79c0333dec0bc7629081_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ebc7bfa00ad79c0333dec0bc7629081_JaffaCakes118
Size

4KB
MD5

2ebc7bfa00ad79c0333dec0bc7629081
SHA1

75e7803b2aea1a4a395e5082c57e49dd7dd81c81
SHA256

ff703abb194362e9a5ad4bbf678e55cb4094fdd9ded37d7f2badcb3fa77541e8
SHA512

5c7915aaf693868eecea7e4f4857f1f46a8d3562eb07a2efaf1f4b777cb242912eeca4287ff71226df288ed85fd3195f51a2484bf8fc74373f5dd60cf6c1f0a7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ebc7bfa00ad79c0333dec0bc7629081_JaffaCakes118

Files

2ebc7bfa00ad79c0333dec0bc7629081_JaffaCakes118
.exe windows:1 windows x86 arch:x86

88e869c313ce6466c7a8089c36597e08

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc

user32

GetMessageA
MessageBoxA
MoveWindow

Sections

.flat
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DFec
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Vfds
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ