10449081e8653bde886c19ac8cf16878_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10449081e8653bde886c19ac8cf16878_JaffaCakes118
Size

2KB
MD5

10449081e8653bde886c19ac8cf16878
SHA1

f2dac04c4ba7cfbcfef32610a98d348ee2e7fa17
SHA256

e32805d10c8ad502144e46adb4ca9b732687926f46f64ea3872ef1144047e11f
SHA512

44e97f86e03728dd691f7472314ba55eacbf6a48f9026b041209188aaa9e7a26ee99cb4caeb93bb0755af7ac2e3941fad83376ded54d5419a33aa6c65fb848f0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10449081e8653bde886c19ac8cf16878_JaffaCakes118

Files

10449081e8653bde886c19ac8cf16878_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6589b03e80793c6a8a16d7a1fdead99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
CloseHandle
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
GetModuleHandleA
OpenProcess
Sleep
WinExec
GetWindowsDirectoryA

user32

FindWindowA
GetWindowThreadProcessId

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ