bb521b92cfc41248349a3870668e599b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb521b92cfc41248349a3870668e599b_JaffaCakes118
Size

4KB
MD5

bb521b92cfc41248349a3870668e599b
SHA1

166d32ef95f3b9f96821f5959eb3ad56880d9669
SHA256

2b9b6a97db334d59fa772c3f68d1d34e74e2bb76d180b0013ca0c7c9e90b0194
SHA512

c7a5ad7d70daeecbc201e54964c8dfa0f435dd0e42183adc5ce53631eaa30a582d840919dcdf9c2cc0e5911fbb1b16b38aedc142a54825cda597ac331e9f617e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb521b92cfc41248349a3870668e599b_JaffaCakes118

Files

bb521b92cfc41248349a3870668e599b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

799757de69c130e73bab0dc0f138c2e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
DefWindowProcA
RegisterClassExA
TranslateMessage
PostQuitMessage
DispatchMessageA
CreateWindowExA

kernel32

ExitProcess

Sections

.text
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE