0efc4a4c8283561ed6b263f6351607ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0efc4a4c8283561ed6b263f6351607ae_JaffaCakes118
Size

3KB
MD5

0efc4a4c8283561ed6b263f6351607ae
SHA1

a481c57727746ace5169cc768ef58591e94f170c
SHA256

cbc07c7e7ea95a3504092d1981d981efb1ec1966f6cfddee073e0d25d1646316
SHA512

a78e0e686305223b1bc44a0f2a7c1128579b18aaca221742ff154a6cf3b5617399788a876721bbe14f220496ade96b6ee0c20b5c78e2c5bbb9cee7117e7baa73

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0efc4a4c8283561ed6b263f6351607ae_JaffaCakes118

Files

0efc4a4c8283561ed6b263f6351607ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c111ec99667489b54519aa6c1ee413ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

DialogBoxParamA
EndDialog
SetDlgItemTextA

cbt_dll

UninstallHook
InstallHook

Sections

.text
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ