174838c45c325e8bd502a77152fc0c41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

174838c45c325e8bd502a77152fc0c41_JaffaCakes118
Size

4KB
MD5

174838c45c325e8bd502a77152fc0c41
SHA1

3c545c684e17c3aad6a733f287b6fb171027138e
SHA256

9bd73057cff19278b9cb16ece759268f7a1494e1120b350bc4e13f059331e20d
SHA512

44caed7ae74cc8f32f70be8cc86304b7a83765f51e78f6b95c2d7c47ae7cb9fcc71663ab6c0c0d47447d204bc3c04821d03792cd7d188c3f143a301f25993e7c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
174838c45c325e8bd502a77152fc0c41_JaffaCakes118

Files

174838c45c325e8bd502a77152fc0c41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e2be74fec5a1c2c5d74c85ba3fd7fcc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateFontA

user32

GetSystemMetrics
LoadCursorA
MessageBoxA
PostQuitMessage
GetMessageA
SendMessageA
SetWindowTextA
ShowWindow
TranslateMessage
UpdateWindow
DispatchMessageA
DefWindowProcA
CreateWindowExA
RegisterClassExA

kernel32

GetModuleHandleA
GetLastError
ExitProcess
CreateMutexA

Sections

.text
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE