3c9d9c1841a9d94662bda15e552e0d61_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c9d9c1841a9d94662bda15e552e0d61_JaffaCakes118
Size

3KB
MD5

3c9d9c1841a9d94662bda15e552e0d61
SHA1

c577aedb94caae85234e2d29a64fdfc3f7521d31
SHA256

a4b0ed0942bf28dfc7b637c72f751b714b4d91d4923e9e3307c170bd576d60dd
SHA512

45f801a2d7ee18a7dfed8b61ccdeac651a345cef078096f84d575799d79ef0499c905971beca32f7e43c834fc63114a7941aee83c0c5430fe8c80ec571f8adf8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c9d9c1841a9d94662bda15e552e0d61_JaffaCakes118

Files

3c9d9c1841a9d94662bda15e552e0d61_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bbd84524ff001004aab58d4732d7bcd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetMenu

kernel32

ExitThread
WaitForSingleObject
SleepEx
CreateEventA
CreateThread
ExitProcess
GetLastError
QueueUserAPC

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ