17733014235e3a7015143cc0729bd27d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17733014235e3a7015143cc0729bd27d_JaffaCakes118
Size

38KB
MD5

17733014235e3a7015143cc0729bd27d
SHA1

081d7092751c8382e3fecfc71811b2d5ea47788b
SHA256

9bd5d93d242c2f2df490f36ac08fed3a5846f7eb20c4832ba8003a7548b38aec
SHA512

986f2eb1f4d5c2ccfd93b8d90896558de88abc46547a4241f12bab41f3f8aba81c8545ad45c607599036d12013be3c349b0d68693a449bc70d4977057c915ec2
SSDEEP

768:2bt/cx0nO2DyH72AyyyUbOEMPwQqpppppfv+:2bxhO37hbOEUEpppppfG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17733014235e3a7015143cc0729bd27d_JaffaCakes118

Files

17733014235e3a7015143cc0729bd27d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f188a558d19175303308624bd0c10947

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
FreeEnvironmentStringsA
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

GetMessageA
TranslateMessage
DispatchMessageA

oleaut32

VarBoolFromDec
VarRound

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ