f9c389c0869501ce3468e195a166fa11_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9c389c0869501ce3468e195a166fa11_JaffaCakes118
Size

23KB
MD5

f9c389c0869501ce3468e195a166fa11
SHA1

d8ff59d81df5d4f79ef31b7dd8d51c4c8eb0c29c
SHA256

34b53d8d60422c02647c64135fa13b780334c0a5ad030932e9de8f24433378c2
SHA512

f7337168451d4fdf120ca639119a4ba59a912ce2acbcdbd09ed21ad9472ad013c47f850f71be54f622d0be1ae6af516bd45c59a1bfc7eea76d81c9063afd05ee
SSDEEP

384:lVkYBg/kLDssMAWkBIhi/UFtZiUychfaEF+PKt/IFLglSQHv5aypEep5:lVEIssVVIh2yTtXJaEVhAP2RfL5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9c389c0869501ce3468e195a166fa11_JaffaCakes118

Files

f9c389c0869501ce3468e195a166fa11_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f33c5fd920f738145c4de9bc16998b25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
DefWindowProcA
BeginPaint

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ