b691a134fc7213f0705f8a36346da85a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b691a134fc7213f0705f8a36346da85a_JaffaCakes118
Size

4KB
MD5

b691a134fc7213f0705f8a36346da85a
SHA1

fa9b2a07ec95cc70da18fc56b8d9e3fca789fb7f
SHA256

40e58437ade0bfa19117b74ccbde6a9a5026bd094bbaf05250e732a70c9647e5
SHA512

292e271eda1cbb298ff862354c6919122c7c4a0c6371981514f2bed8c387d0cf8a3be1a37f6b2e71b8a1d936caf3bbd50c58e7f62cf9a92bb022060d18da89a7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b691a134fc7213f0705f8a36346da85a_JaffaCakes118

Files

b691a134fc7213f0705f8a36346da85a_JaffaCakes118
.exe windows:1 windows x64 arch:x64

e73faf584d28aeda8b8cd6a5a585c2f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc

user32

MoveWindow
PostQuitMessage
ShowWindow

Sections

.flat
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.das34s
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dsad4fX
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ