4c6d79ff8defb9bb03466d47bb54c287_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c6d79ff8defb9bb03466d47bb54c287_JaffaCakes118
Size

26KB
MD5

4c6d79ff8defb9bb03466d47bb54c287
SHA1

cb1a4d4355f01ee1e747435a3b1a15c7b1c4bb74
SHA256

a7e13d58a1477a9fdf1fc47a42ba9b639314500b36b0768a584266d0a31490da
SHA512

69df262f4dad0fd30cac7bce015781347a1d22ffb585817c8cb07c9a970e36768bb44134ee180ce6d52e878d19763b9b69bd106196c25d3f37038fcd842caf96
SSDEEP

768:M8NHHPcb8BRo1A/ggbL3XS6IkyzbAiz4qbi:M8NHHPco3o6LLyM/qe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c6d79ff8defb9bb03466d47bb54c287_JaffaCakes118

Files

4c6d79ff8defb9bb03466d47bb54c287_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93713a50329995811daa966ce1188f5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
FindWindowA
GetMessageA
GetSystemMetrics
LoadCursorA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 342B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ