233dbd50941b3c2b803469f80a861cad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

233dbd50941b3c2b803469f80a861cad_JaffaCakes118
Size

93KB
MD5

233dbd50941b3c2b803469f80a861cad
SHA1

825f45c883d4441664b9bfac01070f5bfd6e9635
SHA256

eddaec7802a516b0cd195a8a42a7cf2b6e1734cd495c13f96fb9f849ec0160f5
SHA512

9f164402ac6773e77996ec770fabb3d948915c765e6e329a72d56e0f9f2fb7d0e3d87ae4162ee05f679f279945bf4dc9b034c2869bd070f196bd08b76a5f6c4d
SSDEEP

1536:vgNzxuuT3PP0t4sQMSSqkeqFUOQNCgxEk3KYYsN4Ik3TeGME0iXIoYwO:vsHuQMSSb/FxsCDk9Ys2IUT5ME0i4oY5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
233dbd50941b3c2b803469f80a861cad_JaffaCakes118

Files

233dbd50941b3c2b803469f80a861cad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

26f9ea1bcc566bdd8da35e86b79fffaf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetCurrentThreadId
VirtualProtect
LockResource
LoadResource
FindResourceA
LocalFree
VirtualAllocEx
GetCurrentProcess
ExitProcess
GetModuleHandleA
LocalAlloc

ole32

CoInitialize
CoCreateInstance

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ