294b99a67dd02eb0a0a061816e616018_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

294b99a67dd02eb0a0a061816e616018_JaffaCakes118
Size

250KB
MD5

294b99a67dd02eb0a0a061816e616018
SHA1

9a2f098ee9c46a308d78cbd8882e55ec13b8f9a8
SHA256

0b092d664a351a6ad384e59a13de3d683c2341d8c0355cf807cdaeeae6b71139
SHA512

f11213bc3b401a0226cfbd530906d1619264382d004a664ef0722ae64af5f5fb90502541d38766ddeb74dee83a98d906827a27cae2f85b8360823495ea684209
SSDEEP

6144:k9zfdsxTsxF8cwTHDHlhk+QVgqv5t9kMCfgTettA4jSB:OKhHDlhkRVjt9kdf2ew46

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
294b99a67dd02eb0a0a061816e616018_JaffaCakes118

Files

294b99a67dd02eb0a0a061816e616018_JaffaCakes118
.exe windows:4 windows x86 arch:x86

68140a9a4b28871f88884585977b9263

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetCurrentDirectoryA
CompareStringA
GetProcAddress
LoadLibraryA
GetTickCount

user32

DispatchMessageA
TranslateMessage
GetMessageA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ