04ac4dc56ab6bedd1d59d909c8c2d9ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04ac4dc56ab6bedd1d59d909c8c2d9ad_JaffaCakes118
Size

4KB
MD5

04ac4dc56ab6bedd1d59d909c8c2d9ad
SHA1

dd9f248729eb0cc11e16298f9baf19ede0affb25
SHA256

a741d9858871759bad30dc29d0d53ace063758990d82a5a7339d23d55bee84e6
SHA512

7f62f5761f90ddbe47fe890c020da1e7f37ffc2be2e1b8be0cc45c994c6ddff1ffd79cdbdcabf69426328ea0fd93503494652d9d5c964801f7ecc35970f98a92

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04ac4dc56ab6bedd1d59d909c8c2d9ad_JaffaCakes118

Files

04ac4dc56ab6bedd1d59d909c8c2d9ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c987c3c290e004f4570e87e88b0740b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlZeroMemory
GetModuleHandleA
ExitProcess

user32

GetDC
ReleaseDC
wsprintfA
ClipCursor
PostQuitMessage
GetWindowRect
DefWindowProcA
LoadCursorA
RegisterClassA
CreateWindowExA
MessageBoxA
GetMessageA
TranslateMessage
DispatchMessageA

gdi32

SetBkColor
TextOutA
GetStockObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE