603aaae8fced62f2a90537de38b4a1a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

603aaae8fced62f2a90537de38b4a1a5_JaffaCakes118
Size

4KB
MD5

603aaae8fced62f2a90537de38b4a1a5
SHA1

7fee99d75591e6dc9721712ef06e2d315ced69dc
SHA256

06451fb8c880e21de651e948f737ae7c79b9d0cfa2e7a154054cce6157de7b44
SHA512

88895438358a9484adc8c6db0ccd97e1b5bb07734eb1e0a299b007f282bc21b55049f68c9de8d887d0b548ff7150a828a662aa2495121d59c7b7148e54a69dbf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
603aaae8fced62f2a90537de38b4a1a5_JaffaCakes118

Files

603aaae8fced62f2a90537de38b4a1a5_JaffaCakes118
.exe windows:1 windows x64 arch:x64

b2fbec151d244fceb94b197d3015702d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc

user32

GetMessageA
TranslateMessage

Sections

.flat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

api
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE