2774cdc7c35f3a8cabbb72d000097ffd_JaffaCakes118 | Triage

Sharing

General

Target

2774cdc7c35f3a8cabbb72d000097ffd_JaffaCakes118
Size

164KB
MD5

2774cdc7c35f3a8cabbb72d000097ffd
SHA1

c91c79a3f22afe82eceb29fd8ee56991ee9c5041
SHA256

9ea555d45b11e78512269d18403c8cff74d2996228ccd849a8317b144bac83cb
SHA512

0c503293f76f4ebdf18103d0541dbcda567fb5f3dccab33d453f738fb9c0eefad26fe38bc4216b4c3f3608145b708c0c718ab391fb3ee4e18ef542820126601c
SSDEEP

3072:lHe88CoZhtBaiyYQko1GRyBOdPnPQRzWMRSgnKZZ:lHeLCojyYQ743JnPQHnK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2774cdc7c35f3a8cabbb72d000097ffd_JaffaCakes118

Files

2774cdc7c35f3a8cabbb72d000097ffd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93361f8c6c57c9899e28c079929db992

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
FlushInstructionCache
VirtualProtect
GetTickCount
GetLastError
GetProcAddress
LoadLibraryA
Sleep
LocalFree
LocalAlloc

user32

wsprintfA

Sections

>o;Q:;Wp
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

KNYqk[&g
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

4-V[D`fD
Size: 4KB - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

XyV1*#w#
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ