f01fb1db234d5ce7d69e51c10490bb76_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f01fb1db234d5ce7d69e51c10490bb76_JaffaCakes118
Size

4KB
MD5

f01fb1db234d5ce7d69e51c10490bb76
SHA1

74fecbd1496c0eebca85ff2ee455d45a78d8640a
SHA256

b20f8c1377674bdedc18871e2e01cf856b58e62d475313b4dc01b4e273289244
SHA512

8a087db2f535f854b8ea10a95d5f69652821b97cf16c374c5d95ceee798dbf27c150231a25808ac12f690524bbc0dde8f8cebb864a4fa41fdd400153e8a9b831

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f01fb1db234d5ce7d69e51c10490bb76_JaffaCakes118

Files

f01fb1db234d5ce7d69e51c10490bb76_JaffaCakes118
.exe windows:1 windows x64 arch:x64

b2fbec151d244fceb94b197d3015702d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc

user32

GetMessageA
TranslateMessage

Sections

.flat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

api
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE