359b4880fbda784ab7fc4872828662bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

359b4880fbda784ab7fc4872828662bc_JaffaCakes118
Size

103KB
MD5

359b4880fbda784ab7fc4872828662bc
SHA1

d1bc8eb436372a273f66225d6b699750aca13b40
SHA256

d73ef19d20ba72938617827558c4f0b90506beddee63fef12b3f54c3e509e860
SHA512

69f5f41e438af937cccc41cd456ac5b07da4ccf2b02699ca01495bb9ea4fc8aaa2b869d56bfe9e1675282b941a84de3bc2c7d8511369293bea0b3958756345f5
SSDEEP

1536:gRz9H9SgRnt3jM+tOG4l8SVQS+dlE5epnYjEHn+kcbYqqSZLn+EFim:gLHzn3I+tOG4l8Qjp4nYjEHpcbRZLnhh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
359b4880fbda784ab7fc4872828662bc_JaffaCakes118

Files

359b4880fbda784ab7fc4872828662bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

014f65d9b65c5219395f6fe276e518b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
FreeEnvironmentStringsA
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

GetMessageA
TranslateMessage
DispatchMessageA

oleaut32

VarRound

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ