4f11294bbbffd8498f8b6faa7a588e30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f11294bbbffd8498f8b6faa7a588e30_JaffaCakes118
Size

4KB
MD5

4f11294bbbffd8498f8b6faa7a588e30
SHA1

e82330bab3b5041ed0db605bd6c7b04229e98c1f
SHA256

c83db345ad8728c365f1ade73c479101b191c21589765f31ecc99960205ddd89
SHA512

e5e07ef73e058b8ff50f132e79a471354681d133a33003bb62330b4e661a89904fe893c2ee34bab909266dcc5a9a11800940512f6771c151456bd95f1b4707ae

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f11294bbbffd8498f8b6faa7a588e30_JaffaCakes118

Files

4f11294bbbffd8498f8b6faa7a588e30_JaffaCakes118
.exe windows:1 windows x64 arch:x64

486cb93e2fe88f71cf410c6b75c93129

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetComputerNameA
GetModuleFileNameA
GetProcAddress
GetShortPathNameA
LoadLibraryA
VirtualAlloc
lstrcatA
lstrlenA

user32

MoveWindow
PostQuitMessage
ShowWindow

Sections

.flat
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

carmapi
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE