3eeef865afd8ecd9171a04d7d3580b27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3eeef865afd8ecd9171a04d7d3580b27_JaffaCakes118
Size

122KB
MD5

3eeef865afd8ecd9171a04d7d3580b27
SHA1

b0d62edec81bd0baf9646aa474a50787e160dad8
SHA256

930d0b204c58cafaadf9e856ef51df7fb21e332d00e1fc5f9762603c6dd8ff32
SHA512

4fe3505c57ab610bbf0ddb6f9de6ccfd2fde22e150e124611880ded5093c4a5347e25e0004b985cf08b1e8cb2a3ad0b0eb43fe0bf9c8e22e362c60f693be79f9
SSDEEP

3072:8pcstDbAdyoEVek0EdwhLvSfO5Emb85QVkfrqfODq:cDbAAoEf0AwhLvS25EtiVkfrquq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eeef865afd8ecd9171a04d7d3580b27_JaffaCakes118

Files

3eeef865afd8ecd9171a04d7d3580b27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d89f544119865ee6fb968ee60266be7f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
FreeEnvironmentStringsA
GetProcAddress
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

GetMessageA
TranslateMessage
DispatchMessageA

oleaut32

VarBoolFromDec
VarRound

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ