b6881201ea08ba6faabccda7a1fc9d9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6881201ea08ba6faabccda7a1fc9d9f_JaffaCakes118
Size

4KB
MD5

b6881201ea08ba6faabccda7a1fc9d9f
SHA1

91fab7df84fe87222a935146be323df7b1528ab9
SHA256

19af304cfd301b8361d32970376d332d2672262a7fb1c08ebdde1d6994e5814b
SHA512

f6893051d5e34981b94e163363d3d5ec062bfb58512af6074435092dc5e5da5071b0fcd7a9422fc04d4ab07c5ffc99acea9e44e35697f83c4d51e0cb531da693

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6881201ea08ba6faabccda7a1fc9d9f_JaffaCakes118

Files

b6881201ea08ba6faabccda7a1fc9d9f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

88e869c313ce6466c7a8089c36597e08

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc

user32

GetMessageA
MessageBoxA
MoveWindow

Sections

.flat
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DFec
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Vfds
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ