d4640c1bc9817beb9e61f96ae933f9cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4640c1bc9817beb9e61f96ae933f9cd_JaffaCakes118
Size

4KB
MD5

d4640c1bc9817beb9e61f96ae933f9cd
SHA1

45a04971eb123f59d26f58b19ce7887a568b09ff
SHA256

7f7c26550eefc28feb92e7a60e23294a20acb2e619fff9664e10155ed9ee477f
SHA512

c615fc81b4e2461b0513b79b5e333f255751ec9ebf96c98c71e82b91210a6d981e6a372c6ef2dbc00df24b3b44416b3734415397064c1e0f1c9241cd49940565

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4640c1bc9817beb9e61f96ae933f9cd_JaffaCakes118

Files

d4640c1bc9817beb9e61f96ae933f9cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d67cca85dc8b9ac3fcd4b11198b2e03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExA
PostQuitMessage
LoadIconA
LoadCursorA
DefWindowProcA
CreateWindowExA

kernel32

GetCommandLineA
WinExec
GetModuleHandleA
ExitProcess

urlmon

URLDownloadToFileA

Sections

.text
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 414B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ