767d7e0227a6168cb9cf0bafbe307afc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

767d7e0227a6168cb9cf0bafbe307afc_JaffaCakes118
Size

2KB
MD5

767d7e0227a6168cb9cf0bafbe307afc
SHA1

6ecc57d30e26fc62315c2d42df74ed9b1339728a
SHA256

9666fd4e05f7847704829d2d3b4467d1a3b91bb7c97320c381a22e255b0c492f
SHA512

15765e60d219c8962ee7f5105f496cb12609acf3357ce7461f5d69042fd1dc3094e11b8a99e2405d3577de5eb904aea4575d7e07f246420ba077849f7452ee2c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
767d7e0227a6168cb9cf0bafbe307afc_JaffaCakes118

Files

767d7e0227a6168cb9cf0bafbe307afc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d9112421cca47a3412dba04ea01618f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostMessageA
FindWindowA

kernel32

WinExec
LoadLibraryA
ExitProcess
GetProcAddress

Sections

.text
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 238B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE