41532678625d8378494b479b5ace6666_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41532678625d8378494b479b5ace6666_JaffaCakes118
Size

2KB
MD5

41532678625d8378494b479b5ace6666
SHA1

781525f8b564889105bf858f079c57fb5743de09
SHA256

10e91620989f4d21ee2685f949bb85522ebb6e5bcdcc963dceb193ec4f4af017
SHA512

84e72c13381353413c53c48c3b14d67bfc07d5b069a88ce61254724b58b29828d22c0e7e48c97da6bdbeadf1869c3a76d40f920ceda65a0b6bc6980fddbceb49

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41532678625d8378494b479b5ace6666_JaffaCakes118

Files

41532678625d8378494b479b5ace6666_JaffaCakes118
.exe windows:4 windows x86 arch:x86

826fa62bcbbf0d4b5423804db5f36604

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCurrentProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
WriteProcessMemory
lstrcatA
lstrlenA

user32

MessageBoxA

Sections

.text
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE