2a53975020d129e2a7ce835af7a48a5c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a53975020d129e2a7ce835af7a48a5c_JaffaCakes118
Size

9KB
MD5

2a53975020d129e2a7ce835af7a48a5c
SHA1

5710bfcd6dcb67d49df6f9650ac7413d0cb29c1b
SHA256

1a91a3334932028d31d934b51f6a80556970556238c5166cd20d0eb59c7011a3
SHA512

3e8a95c3db5139c5572fe266b234f9575c3c6e30892fc3be4fce718f06c97510f7acc9bb8f64e276f7b0803aa264a326e76b7f342c65a053c54256110b7adc8f
SSDEEP

192:xHLJEWKcSBMn84qAaCPsq5fvWHbjRuS090u4j:tjKc3lqEPsq53cbjgSjuw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a53975020d129e2a7ce835af7a48a5c_JaffaCakes118

Files

2a53975020d129e2a7ce835af7a48a5c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f33c5fd920f738145c4de9bc16998b25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
DefWindowProcA
BeginPaint

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ