b3df419273f232a5b20fc414283959d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3df419273f232a5b20fc414283959d0_JaffaCakes118
Size

2KB
MD5

b3df419273f232a5b20fc414283959d0
SHA1

d36ed00495a71d7a68b55df8313eb4ae98d1e211
SHA256

2fbeba9d215702eb8a222b1750d11ad8b3668265b0f05e3cee9d9f7e840f073e
SHA512

6375a0d67c0d80157a92f46abcf39fe39a5310baef13f38c5708d0d1ce05c8f76eca47a7b9049f3695ec804d2a2477f381ae95df778ecb4cc77f0cdea171d044

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3df419273f232a5b20fc414283959d0_JaffaCakes118

Files

b3df419273f232a5b20fc414283959d0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

14610dd0ebbc796a9a3a2ba2cdd24e79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

user32

MessageBoxW

Sections

.ddfd.
Size: 512B - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aedgt
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Demonlil
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ