5e14a109399e490f3c07ccc796058917_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e14a109399e490f3c07ccc796058917_JaffaCakes118
Size

9KB
MD5

5e14a109399e490f3c07ccc796058917
SHA1

77fb68636d5f71776e1d22052d64eb5aaf5398b8
SHA256

ee573ec08f3af3aece79dc4e2b60cbea7e688af0aeabe13b89583111482c53c9
SHA512

ff865185f2f9d02a527bc3268fd2c6769c917ed14044c0d17ce9ea369a1ccf59157313df9fdef9d4395541395175a0c62a43ab659b5ea4c52c39fb679e8ca081
SSDEEP

192:VHrPf08K/alC3Bs75dBq+yu/ClwgXSb/0uOMemv3tIYX:VLkMk3BsfI+yuqlw6SbTOxm2YX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e14a109399e490f3c07ccc796058917_JaffaCakes118

Files

5e14a109399e490f3c07ccc796058917_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f33c5fd920f738145c4de9bc16998b25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
DefWindowProcA
BeginPaint

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ