f9ba678c0404b26ecdc0cb70d87999f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9ba678c0404b26ecdc0cb70d87999f4_JaffaCakes118
Size

3KB
MD5

f9ba678c0404b26ecdc0cb70d87999f4
SHA1

9df2407cb8d4730184e66675b40a22abc06d4cd6
SHA256

127f4935510a4408cdcc03f1816723120b9617b88820f27b2c733fb813b774f6
SHA512

bcff734aa6e85aab3cfadf942ca98fee78dad8b838b1b33e23271dcf82b295fdb5633436a7995b479860e9669a3b098ff831fd1df6718cad1b25e4fe06742b3d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9ba678c0404b26ecdc0cb70d87999f4_JaffaCakes118

Files

f9ba678c0404b26ecdc0cb70d87999f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2bdd26a678611ae863d967496566d05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
VirtualFree
FreeLibrary
DeleteFileA
WriteFile
ReadFile
CloseHandle
SetFilePointer
GetFileSize
ExitProcess
CreateFileA
lstrcatA
GetProcAddress
LoadLibraryA
GetTempPathA
VirtualAlloc
WaitForSingleObject
CreateThread
GetModuleFileNameA
GetModuleHandleA

user32

SendMessageA
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
RegisterClassA
LoadIconA
LoadCursorA
DefWindowProcA
PostQuitMessage

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE