b4dfa6274d80a1681f265698e7d26efb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4dfa6274d80a1681f265698e7d26efb_JaffaCakes118
Size

4KB
MD5

b4dfa6274d80a1681f265698e7d26efb
SHA1

dffbc686c71d52b600646020cf69abd4fc781a24
SHA256

9b51449815d5fecf293091cd0bcd224946f1279c16336c96907c0146ebd717b9
SHA512

06126a67d416428eeed7fc75fe5ad5cc9c75a9c1d37d7d43f8489d84bfd1fdb9e7797ed3f3ff74e2ff56f8d49cea52c1e52d9a554074e39ed54a8f25367e62d5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4dfa6274d80a1681f265698e7d26efb_JaffaCakes118

Files

b4dfa6274d80a1681f265698e7d26efb_JaffaCakes118
.exe windows:1 windows x86 arch:x86

85cc5e56b864cccf7fcba3aebec26622

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc

user32

CreateWindowExA
DispatchMessageA
GetMessageA
LoadCursorA
LoadIconA
MoveWindow
RegisterClassA
ShowWindow
TranslateMessage

Sections

.text
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dacre
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.das34fd
Size: 1024B - Virtual size: 901B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ