2352921094c23e66abf8d01cce97386e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2352921094c23e66abf8d01cce97386e_JaffaCakes118
Size

2.0MB
MD5

2352921094c23e66abf8d01cce97386e
SHA1

78c02aea6cfcd989535030109f0ff678fb15ecde
SHA256

c6250b85333b92cc190efe0f12f77c1499228acbbb44f067ee3f6f584a8c457b
SHA512

d1286b25829e03924a3bbf2b729b09d67afacc48bd00211b680793d8f4f54b132576457cd52717904dc102096e670b5198c6264a4bec6f29f3ddbd69634189df
SSDEEP

12288:Uv2v2v2v2v2v2v2v2v2v2v2v2v2v2v2v2v2v2v2v2v2v2v2vImmmmmmmmmmmmmm3:s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2352921094c23e66abf8d01cce97386e_JaffaCakes118

Files

2352921094c23e66abf8d01cce97386e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b14b33822af327d63b2af335343e10d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
GetProcAddress
GetTickCount
LoadLibraryA

user32

DispatchMessageA
GetMessageA
TranslateMessage

advapi32

RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ