0165a6d00b46375687aa4266a5f8ec25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0165a6d00b46375687aa4266a5f8ec25_JaffaCakes118
Size

1KB
MD5

0165a6d00b46375687aa4266a5f8ec25
SHA1

1174bcbc1a165d5f3c8f9a2bc25edfa0844c2848
SHA256

ce5556d7bb8ece5b359e8d845a7b66da3d56de41ef0a50197535e76c29c3e10d
SHA512

e83ed0d75e66319564702c608a4acd3ba2abaa3006df068d798109ddec6fe65ee52551377e000d3fa7d1bc3b2e38c7f6a82f76fdfe119def8da94c4db76e06a0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0165a6d00b46375687aa4266a5f8ec25_JaffaCakes118

Files

0165a6d00b46375687aa4266a5f8ec25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e5c7eae9f3c4bcfd7e8dbd770d1d421

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowThreadProcessId
FindWindowA

kernel32

WriteProcessMemory
WinExec
WaitForSingleObject
VirtualFreeEx
CloseHandle
CreateRemoteThread
ExitProcess
GetProcAddress
LoadLibraryA
OpenProcess
VirtualAllocEx

Sections

.text
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ