eb9cd6fd4181bd9d9558a9221a1a26c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb9cd6fd4181bd9d9558a9221a1a26c1_JaffaCakes118
Size

3KB
MD5

eb9cd6fd4181bd9d9558a9221a1a26c1
SHA1

f4e82402be047b42496d38a39098ee2c0d65d2c8
SHA256

6596664f4908780a7b875d667fe382e1d1e6dd5c1cdd66a129762091c7708dcb
SHA512

31c00bf7fffd3912f68906a2d7e5472bb0da73e53890ebcca0a553aa838cac41bbfbb68ad4c7302cbb0c3548cb0cfd71bbcc028ec60596be2536488cd7c3119f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb9cd6fd4181bd9d9558a9221a1a26c1_JaffaCakes118

Files

eb9cd6fd4181bd9d9558a9221a1a26c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

894ea5d3cc65940a79a3432dab3f24e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

DestroyWindow
PostQuitMessage
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
MessageBoxA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA

msvcrt

__set_app_type
_controlfp
exit
strstr

kernel32

GetCommandLineA
GetStartupInfoA
GetModuleHandleA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE