b4080fe675819143cc06412af2f84d57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4080fe675819143cc06412af2f84d57_JaffaCakes118
Size

26KB
MD5

b4080fe675819143cc06412af2f84d57
SHA1

67ca4e9b27c42a9122766dc0e116ed46972cc00f
SHA256

a08195ac46db95472b00ec61664e16d79cccbf334c95d82c8e7155b1b891e21b
SHA512

42a7aa81c4a796f85f9d434152e670cffe13aee120845c842053f391657c04a6e036478353fa53daa1821fc2960dba732123d8dc9bca809470d56b2851d96254
SSDEEP

384:rlwQ47cQriyW9RqQLkkO56Bce8CEs270kaeUdgBquN1HKiSKJjtePIC:Zsiyq1EOEs270LdgBqu/SKJjteR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4080fe675819143cc06412af2f84d57_JaffaCakes118

Files

b4080fe675819143cc06412af2f84d57_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93713a50329995811daa966ce1188f5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
FindWindowA
GetMessageA
GetSystemMetrics
LoadCursorA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 342B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ