34d92351301ec1734cd43f5d0f95c3cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34d92351301ec1734cd43f5d0f95c3cb_JaffaCakes118
Size

119KB
MD5

34d92351301ec1734cd43f5d0f95c3cb
SHA1

183653a8fddab578a77d138143318e30da7adec5
SHA256

04c0ef77e9540d07852024ef90c37f4cf2f23ab6f6d10ecde5c75d8c11bb0ae2
SHA512

2a6f5e600ea8cea14d055f9294c8e9c57ac86cbe1ac7774a842fbf6331bdf09090e90573a001f5c9f0cb7e60e7d6e21eab6448602481c019fcf3992e8c855623
SSDEEP

3072:uJhjDgaCDC0A69VffwYxxMtwS0b2yiB8b:uJNoDFA+FfzxPSy2yP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34d92351301ec1734cd43f5d0f95c3cb_JaffaCakes118

Files

34d92351301ec1734cd43f5d0f95c3cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea102a6c92db52adc357d42e011d09b0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
VirtualAlloc
LoadLibraryA

user32

DispatchMessageA
TranslateMessage
GetMessageA

oleaut32

VarCat

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ