2de1a60e0776444ec609fdd6d49b51ac_JaffaCakes118 | Triage

Sharing

General

Target

2de1a60e0776444ec609fdd6d49b51ac_JaffaCakes118
Size

123KB
MD5

2de1a60e0776444ec609fdd6d49b51ac
SHA1

db9622417ab779e4b983484c5b8eb9360fb246e7
SHA256

cb7e519d010fa296bc0065176b0ec65b4875412eba832ed296c6b8dda9e4432c
SHA512

a8f4d0bd55e4c84c9a4958b792a420877f9006b15d1c64556ded1bbac152a97c8d728c0a00607d8a23addaa9e3216ff95479968e1371bc925a687b9f9a9d5bc0
SSDEEP

3072:09+XyCbdKTMfoaIV+ISYY39B+oev8szyVSizt:yx4Axs9B+oe1ef5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2de1a60e0776444ec609fdd6d49b51ac_JaffaCakes118

Files

2de1a60e0776444ec609fdd6d49b51ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d477960c5f95b9dba28bd87f39c89e7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
FreeEnvironmentStringsA
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

GetMessageA
TranslateMessage
DispatchMessageA

oleaut32

VarRound

ole32

CreateObjrefMoniker

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ