e93776d6ee87129344e6d55987c98c81_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e93776d6ee87129344e6d55987c98c81_JaffaCakes118
Size

128KB
MD5

e93776d6ee87129344e6d55987c98c81
SHA1

8ba9643e6b06bbb06a6e4db9cd186d77fff0f66a
SHA256

38728d9ef33318e0a6a401856fa38f991bd7b97e5ae8835fceb99574cc0f2947
SHA512

5eea2044ae8e78aba8caa5e248be76c839deb0d500d4e3500590c70f4368e7168bd8cfc05f9313badc20f3559e7ae187e3c495987e09c8001d202c3b92f2f401
SSDEEP

1536:5bySxEFtjwe8Kq68UsjdkXdFwC/604A9XFJkGmG0Mlsa9/NgD+qA:5+SxErN8KFsBiU/04A9VJ4Gv9OaqA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e93776d6ee87129344e6d55987c98c81_JaffaCakes118

Files

e93776d6ee87129344e6d55987c98c81_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58b380adbdff8c27916228c470319ee0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetFileType
GetProcAddress
GetVersion
LocalFree
CompareStringA
LoadLibraryA

user32

TranslateMessage
DispatchMessageA
CharNextA
CharPrevA
GetMessageA

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ