b2fa26ef76cba75f0ef40ecc48d20c51_JaffaCakes118 | Triage

Sharing

General

Target

b2fa26ef76cba75f0ef40ecc48d20c51_JaffaCakes118
Size

2KB
MD5

b2fa26ef76cba75f0ef40ecc48d20c51
SHA1

dbfcf9056dad107c76843d840dd2d94cf7754c3b
SHA256

e78cf72b5854ca1e601c24dce8da663e13e72a4e62ca8d303c303d31de0ff750
SHA512

83eb508f1fb3baae96c840ea17c7b8774966dd5297692cbe5bac36c111b23b26cfa1d8225a4d4e61175a8ef213b6d1829a08b40826b6655b0f0962abf6a4e24a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2fa26ef76cba75f0ef40ecc48d20c51_JaffaCakes118

Files

b2fa26ef76cba75f0ef40ecc48d20c51_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ddeec95003b8e77b3558fb2508b83a8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
CloseHandle
Sleep
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
GetModuleHandleA
OpenProcess

user32

FindWindowA
GetWindowThreadProcessId

msvcrt

sprintf
_except_handler3
_chkesp

wininet

InternetOpenA
InternetOpenUrlA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE