fe685b6bef7f76ef553e0aa2f47c2e35_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe685b6bef7f76ef553e0aa2f47c2e35_JaffaCakes118
Size

3KB
MD5

fe685b6bef7f76ef553e0aa2f47c2e35
SHA1

b7a3081ee18fa4e8241d688fe93b1e4d5f7a0e5f
SHA256

caa979c0cc96cd7529129113093f75357312f31d29af2252cda71a54fbf811a8
SHA512

d929a6fd42a4fbd8231845d5f1b0518cb358ba21d18ac2be084abe52ba3116a3281db43c2e54df2eed00c8fe17fba9dfcfa01b5a0b4b0b5836c4d474ba9b5dc5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe685b6bef7f76ef553e0aa2f47c2e35_JaffaCakes118

Files

fe685b6bef7f76ef553e0aa2f47c2e35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84f20455c66042b631dff67e77ccf303

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateRemoteThread
DeleteFileA
ExitProcess
ExitThread
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetWindowsDirectoryA
LoadLibraryA
OpenProcess
VirtualAllocEx
VirtualFreeEx
WinExec
WriteProcessMemory
lstrcatA
lstrcmpA
lstrcpynA

user32

GetWindowThreadProcessId
FindWindowA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ