62869fdfeb40e097b45f253cf010c7fa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62869fdfeb40e097b45f253cf010c7fa_JaffaCakes118
Size

4KB
MD5

62869fdfeb40e097b45f253cf010c7fa
SHA1

0a795a79c98f4b115096dc3814c14dfe3f6bd33a
SHA256

7d299b896a474bc254d46afb8b7bd2237080aec5230b4c62cddfdca5080a806e
SHA512

137f377dc8c520c42d726c6c6595598aca524cdc6e70b82ce17aac988a0c3866d03bdc54802094912e95189ca284aa4d8f683849add4b2b4df3e21125d6f73a0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62869fdfeb40e097b45f253cf010c7fa_JaffaCakes118

Files

62869fdfeb40e097b45f253cf010c7fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b1471552ec3e9aa5053ead0ac841a1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasesW
CallNamedPipeA

user32

RegisterDeviceNotificationA
MessageBoxA
IsCharUpperA

gdi32

CopyMetaFileW
GetCharWidthFloatA

Sections

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasm
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ