dd3ea0bb023a6a3d554932ed3f9ab632_JaffaCakes118 | Triage

Sharing

General

Target

dd3ea0bb023a6a3d554932ed3f9ab632_JaffaCakes118
Size

3KB
MD5

dd3ea0bb023a6a3d554932ed3f9ab632
SHA1

916753355c3e9f48438a913ba68c0501c3b31490
SHA256

d004f5d2fa2e24720ff6088134217dd951b785287e4551640631a430769b2659
SHA512

27078de0f7791df62437f460f6f9f6b96579ee9d4fd39cf10bbf52ad62d766f38d94768bef41addca298faa3fa4a8e99499263f79468177a2833ac575e35f08d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd3ea0bb023a6a3d554932ed3f9ab632_JaffaCakes118

Files

dd3ea0bb023a6a3d554932ed3f9ab632_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef76055c162e902cfa066514a7028408

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC

kernel32

CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject

gdi32

EnumFontFamiliesExW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ