411c787ba3d21ec4284926a4591fe6c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

411c787ba3d21ec4284926a4591fe6c3_JaffaCakes118
Size

3KB
MD5

411c787ba3d21ec4284926a4591fe6c3
SHA1

5d8b1edd2a44848f6ca9fbd5f28d0e5a6d81d342
SHA256

2fc714703762c9cbca8f6d266202d3ff9b4fc75f2b59889395a81496d750094c
SHA512

793e3279d81131910fc45bc0af4809e01a899aa56a40a4e762fadd0475fed581dd507450b0b72122ff40a4011deeebf0fcfb6d1a7d5dfdd2dcc8ae04c282f1f8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
411c787ba3d21ec4284926a4591fe6c3_JaffaCakes118

Files

411c787ba3d21ec4284926a4591fe6c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1560174a5bff89260145f57eb7a5d7e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
BeginPaint
EndPaint
DialogBoxParamA
PostQuitMessage
DefWindowProcA
EndDialog

gdi32

TextOutA

msvcrt

__set_app_type
_controlfp
exit
strstr

kernel32

GetCommandLineA
GetStartupInfoA
GetModuleHandleA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE