617866a96085efd379a96d30d788b36d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

617866a96085efd379a96d30d788b36d_JaffaCakes118
Size

3KB
MD5

617866a96085efd379a96d30d788b36d
SHA1

8a9be06e146b2de287613d1617d0f1fbf94be14e
SHA256

253bcd8f56ca83eb9cc372bd6d3bb930ec1b8e274c4a4a85cb1721db81d7d1c8
SHA512

055ebe5173c4582efef7e3fee1d64363ce7f1669a09a4b3b86ae120cee49664748776f9067098f12bb4eaa6c2cb39024a20b66bdd92ac10c16d0ea2bb276e355

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
617866a96085efd379a96d30d788b36d_JaffaCakes118

Files

617866a96085efd379a96d30d788b36d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bbd84524ff001004aab58d4732d7bcd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetMenu

kernel32

ExitThread
WaitForSingleObject
SleepEx
CreateEventA
CreateThread
ExitProcess
GetLastError
QueueUserAPC

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ