ab6e43c385a3de16af0ba941504ebf61_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab6e43c385a3de16af0ba941504ebf61_JaffaCakes118
Size

4KB
MD5

ab6e43c385a3de16af0ba941504ebf61
SHA1

7dd141438ce85e73c0455a75069e4988bbcad1ec
SHA256

686f6c71dbc368984aa5fa19e7c987c9e2b78e68a3fa3bb9726612d515ae5db6
SHA512

307fdd65c71b2ebc62afb5ccd640c19b403fc85ffb7f2ace1c297a3dfbb28e19c2b92294a85075bd1b8353c6bde6cd6251ac26a2fa7c6c945a84fcd3adf46bf6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab6e43c385a3de16af0ba941504ebf61_JaffaCakes118

Files

ab6e43c385a3de16af0ba941504ebf61_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e73faf584d28aeda8b8cd6a5a585c2f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc

user32

MoveWindow
PostQuitMessage
ShowWindow

Sections

.zxdae
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dacre
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.das342d
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ