2190026a0a4957f0e7792dbff6f408a3_JaffaCakes118 | Triage

Sharing

General

Target

2190026a0a4957f0e7792dbff6f408a3_JaffaCakes118
Size

123KB
MD5

2190026a0a4957f0e7792dbff6f408a3
SHA1

2012299fe112715834730e5a6b129f26c3fd4b46
SHA256

57efb2c894ac97d015be6f4337ecbac86d94459dfe5016e9b98d7daebc5d4622
SHA512

a129fbacee8f1f5a53a83dbda8f9a778d153e74bb3e337d004b8985b477213eab97fff89ab66983b7fea7799b3b0151ae55ccff7cdb48cac9e8de4782cdc7b5d
SSDEEP

3072:a9KTPksnT41nkRenBO+4LdCVQfv2HZopWS+0b3sAqr:DbnM9kRen4+4LdCAOHWDsx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2190026a0a4957f0e7792dbff6f408a3_JaffaCakes118

Files

2190026a0a4957f0e7792dbff6f408a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a3724f57367e6e7e481d8f797b7260c3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentDirectoryA
CompareStringA
GetProcAddress
VirtualAlloc
GetTickCount
LoadLibraryA

user32

TranslateMessage
DispatchMessageA
GetMessageA

oleaut32

VarRound

ole32

CreateObjrefMoniker

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ