dd22c8216e8a54e81b85f4c653c68e25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd22c8216e8a54e81b85f4c653c68e25_JaffaCakes118
Size

2KB
MD5

dd22c8216e8a54e81b85f4c653c68e25
SHA1

f552436bd2416adb2cca9cd1b78c690962e2dc75
SHA256

c2d5da08fcb3e696d543fe2c8469497351101cbb76f831be651a5857e131fd97
SHA512

2dc833e25cf3b4b57bbab323d5a2f0d542523042176eaa82729becb8c83a59cf65f496807a3504a4ccac9aa3773895cf686921667ef9ada88285de4e5d529c8e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd22c8216e8a54e81b85f4c653c68e25_JaffaCakes118

Files

dd22c8216e8a54e81b85f4c653c68e25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

82f79aad91d382571484ede0503e75e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetWindowThreadProcessId
FindWindowA

kernel32

ExitProcess
WriteProcessMemory
VirtualAllocEx
OpenProcess
CloseHandle
CreateRemoteThread
GetModuleHandleA
GetProcAddress

Sections

.text
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE