37144baba695bcfefef52683c7abcf14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37144baba695bcfefef52683c7abcf14_JaffaCakes118
Size

5KB
MD5

37144baba695bcfefef52683c7abcf14
SHA1

559e83c4a6cef8869ddc1766debb70c3922d3d95
SHA256

a9767c14932c08c1969db52b420cd94a5056a2e80aacf51551bd1d075bdad52e
SHA512

912b42df321746794bc575fe4ec83a6242514e7e6aac30b0317033e39203f4218e0f8d576645228c3a0220063f837048da30c9bd9da2bf16b13cf32752428144
SSDEEP

96:umyD9ENifFiBBlwSlh/57SKUpACLF7APhJ2:uJ8uS7/5mKUptgh8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37144baba695bcfefef52683c7abcf14_JaffaCakes118

Files

37144baba695bcfefef52683c7abcf14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5011f4c319de6d2667657225d28699b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetWindowThreadProcessId
FindWindowA

kernel32

ExitProcess
WriteProcessMemory
VirtualAllocEx
OpenProcess
GetProcAddress
CloseHandle
CreateRemoteThread
GetModuleHandleA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ