3cd4c4def2f02076daf62dbfa4ec6498_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cd4c4def2f02076daf62dbfa4ec6498_JaffaCakes118
Size

4KB
MD5

3cd4c4def2f02076daf62dbfa4ec6498
SHA1

816d0870e9c2acd6186aad1d3156c99219726cff
SHA256

1657e52b19b58769296cfd421b5a2bdabb6bd8849657e68ab0f52c7a878f13fb
SHA512

344efc7df4fa4a51d6712b5da007a24f9476b1b59c2def433703b8e3a9b42327a0dea2c3818d8bd82b494c24929eac5afd4cd00d598f6b00eb120f74012a76fd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cd4c4def2f02076daf62dbfa4ec6498_JaffaCakes118

Files

3cd4c4def2f02076daf62dbfa4ec6498_JaffaCakes118
.exe windows:1 windows x64 arch:x64

b6d529bf37060dcd3e48a1de30b8953d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
VirtualAlloc

user32

CreateWindowExA
DefWindowProcA
DestroyWindow
DialogBoxParamA
DispatchMessageA
LoadCursorA
MessageBoxA
PostQuitMessage
RegisterClassA
TranslateMessage
wsprintfA

Sections

.flat
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

api
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE