d744e572bdeff445e542269e17111853_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d744e572bdeff445e542269e17111853_JaffaCakes118
Size

2KB
MD5

d744e572bdeff445e542269e17111853
SHA1

2855e06008eaaa03159eb4483e7325de9f8eab97
SHA256

a95acad0fc165b84704e8626f71d2610b79f9144252718edd207622620bac5d6
SHA512

eb29e482c33c2fa8f080705f142af9678cef49dbf94bb2f23b2c5174cff4b4106f0dead739999d9c314deea2c51767a4e63efad6f716da9a973313a23d1a7885

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d744e572bdeff445e542269e17111853_JaffaCakes118

Files

d744e572bdeff445e542269e17111853_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cb6cc0b7eaa62d2b687c867e8cb50d20

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
OutputDebugStringA
GetLastError
CloseHandle
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
ExitProcess
CreateProcessA
WaitForMultipleObjects
OpenProcess
CreateEventA

user32

wsprintfA

Sections

.text
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ