468954bdffe8b5526891094f0a91bb3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

468954bdffe8b5526891094f0a91bb3d_JaffaCakes118
Size

3KB
MD5

468954bdffe8b5526891094f0a91bb3d
SHA1

ac8e9df78965f167e31bff5b5b7d10efc7408a0d
SHA256

dad0e015654408d93d2e438bb50383310718a37018bd7bd12e0ce0dcabe68f0c
SHA512

48e5e314e25a478f6c60d273092252b3fdcfc494d8f0947aafe350e6e208b9f688b0ea96cd067702987fa9843fa32afb19c1c3d44c3da3b5cea08f4ffa4978c2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
468954bdffe8b5526891094f0a91bb3d_JaffaCakes118

Files

468954bdffe8b5526891094f0a91bb3d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

19d1066547474821340569523981e374

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
LoadCursorA
PostQuitMessage
RegisterClassA
SendMessageA
TranslateMessage

gdi32

CreateFontA
DeleteObject

Sections

.code
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 976KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ