6561fd8fbffa3679643fb1c32b367f67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6561fd8fbffa3679643fb1c32b367f67_JaffaCakes118
Size

66KB
MD5

6561fd8fbffa3679643fb1c32b367f67
SHA1

413e1051d76e1f412b499a03db25ec71b40d83d5
SHA256

8ca78f08d5ce4a1aa2bdc539fa9a8b82fc5bf4178206020e8998bace16599e14
SHA512

1eca07c22aac18ac463e6169ebbce5ab0cb31918bf37b02d1b4253b6b04ae4333ffef63c1f6805ad8a5e49db8b09feefd0d029c5bc78083439a71cafa526c9a4
SSDEEP

1536:2Bo8uu2mb/tiVUOP07uzqhdWfL4oKhYil/Omo9LZBOQnCEgTm4X3:9u2mAEhc+rlzo9V8B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6561fd8fbffa3679643fb1c32b367f67_JaffaCakes118

Files

6561fd8fbffa3679643fb1c32b367f67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f33c5fd920f738145c4de9bc16998b25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
DefWindowProcA
BeginPaint

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 136B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE