2ac98ebf0579a297838a8465569e4bbe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ac98ebf0579a297838a8465569e4bbe_JaffaCakes118
Size

3KB
MD5

2ac98ebf0579a297838a8465569e4bbe
SHA1

663aadd1d7da8f87abda5917c0793b64573fd97b
SHA256

9961edd424663b2744acb5bc385dfcc59c314a28b98b5cec3b89b38de2b42ff5
SHA512

8da3f674f1290edb27802333c28f549191b30d527310931c594d32daf876bb99725d4547fa64a2e5154b954fa26ac50ee1e235c17e69290e2d8dfa6654e5c8cd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ac98ebf0579a297838a8465569e4bbe_JaffaCakes118

Files

2ac98ebf0579a297838a8465569e4bbe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce56603c98d86bead00306200e183601

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

Process32Next
lstrcmpiA
CloseHandle
CreateRemoteThread
CreateToolhelp32Snapshot
ExitProcess
ExitThread
GetModuleHandleA
GetTickCount
OpenProcess
Process32First
WriteProcessMemory
RtlZeroMemory
Sleep
VirtualAllocEx
VirtualFreeEx
WinExec

psapi

GetModuleFileNameExA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ