ab2ffd78f7c6a1abba4c6075c80b8218_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab2ffd78f7c6a1abba4c6075c80b8218_JaffaCakes118
Size

2KB
MD5

ab2ffd78f7c6a1abba4c6075c80b8218
SHA1

a4ce2d5d6866c0740303f2d3331083237caca912
SHA256

03e51aa7125d47482a224626c0c52b39ca87c9502be8c4c1871c8be2751b6c13
SHA512

b5cb23f695f10e4707bc7365292967b0f8b466f35328c790308a87a08ee0d8131daae6812156e5fb46ecfc6e3e1b227e6bb711f10e302f1e50b42f080d706e0d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab2ffd78f7c6a1abba4c6075c80b8218_JaffaCakes118

Files

ab2ffd78f7c6a1abba4c6075c80b8218_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3de78dd1610947813568bccd0eda83ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateRemoteThread
ExitProcess
GetModuleHandleA
GetProcAddress
OpenProcess
VirtualAllocEx
WriteProcessMemory

user32

GetWindowThreadProcessId
FindWindowA

Sections

.text
Size: 512B - Virtual size: 286B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE