eadd6734e549228ab540beed4f3cc765_JaffaCakes118 | Triage

Sharing

General

Target

eadd6734e549228ab540beed4f3cc765_JaffaCakes118
Size

9KB
MD5

eadd6734e549228ab540beed4f3cc765
SHA1

167822e296d46fe218b42073447202eb6f2ed682
SHA256

96b730013695e347d9c9bd9d5fb89f9128d3a5f35ece5facbd5b0b307b1a06ba
SHA512

071b37fe4855af2da20fb184d40da122f9dec9e85acc186465417a79de366da29dac6966b041653f09c0afb2296c843dad5c26f15c8ef3ea15afe9685d75ed26
SSDEEP

192:XHLJEWKcSML5XPg49GiZ8TXdwfyScdNlBS:bjKcVxD9ZAaahdLBS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eadd6734e549228ab540beed4f3cc765_JaffaCakes118

Files

eadd6734e549228ab540beed4f3cc765_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f33c5fd920f738145c4de9bc16998b25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
DefWindowProcA
BeginPaint

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ