29c7996aca08380f8ee94a01ba41fb65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29c7996aca08380f8ee94a01ba41fb65_JaffaCakes118
Size

286KB
MD5

29c7996aca08380f8ee94a01ba41fb65
SHA1

b9922c094897428714390907b4428a599a8416b7
SHA256

48c10b509de527a1e78e009f818fcf5161463657eed2271e7b6022f707ca583f
SHA512

7ae5511ac9b7f77514407d4a415c40a9801ea218db542ced7dd7ea6b46d88da7226a1ee3a28c20b776d9fb6c876f2cf6b898930fcc31962520853ec7896bf05a
SSDEEP

6144:h84lyFME+/+FPA9TzSObHVNX1/b83t6FpvkknBvOxYuE:haFME+2FSdh8MvkkBvF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29c7996aca08380f8ee94a01ba41fb65_JaffaCakes118

Files

29c7996aca08380f8ee94a01ba41fb65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

98369abdbf1057ab6fb55fb5789ecf40

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
lstrlenA
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcmpA
ExitProcess
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
GetLastError
SetFileAttributesA
lstrcatA
GetEnvironmentVariableA
Sleep

Sections

.text
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE