264310198ff1fd8fd86775003fffffba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

264310198ff1fd8fd86775003fffffba_JaffaCakes118
Size

118KB
MD5

264310198ff1fd8fd86775003fffffba
SHA1

1171fa822caf76773e6caa36eab6908d4f841599
SHA256

780d1dc7f25105fa422ccf95d91c8d28df352b50a2daee157ca9a161fb4a5044
SHA512

0f7454785a79c788d82a2f0087cb9ddcfca398eec75644fcd7892e7bf5d81d013d29f02df15909fc8f15610c2ff7e9cbc24afe35f8404e1168e57452077472ce
SSDEEP

1536:8235b7vkmVN+1ePf+iRA561RBhoB1Eqqi2LyFS:Z3lomT+sPfjvfB3q52LyFS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
264310198ff1fd8fd86775003fffffba_JaffaCakes118

Files

264310198ff1fd8fd86775003fffffba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a37aab13b28bd4b2d1cf6aef5c561f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
GetProcAddress

user32

DispatchMessageA
TranslateMessage
GetMessageA

Sections

.text
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 314B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE