4cad162390b8f36b6ed805c51f6a481b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cad162390b8f36b6ed805c51f6a481b_JaffaCakes118
Size

35KB
MD5

4cad162390b8f36b6ed805c51f6a481b
SHA1

0d1b59e4ec9ba37b34f09a6f9f9d44d5bb29958e
SHA256

c1b88a2c7b386379087787de2b5ee9de6d536dac7f6037e976869a3b80a0a851
SHA512

4e3878ab90c491ccc913bf71f073544e41b726510b37d9180a7751e8f270d8842d23fcb1542aca085fd63face6ea2d028261add54106f784a9527aa1dde73ed5
SSDEEP

768:pxTnu8L0FajnTuMMu3O0Gg41HDwuW0tz:PBnTuMvGThwU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cad162390b8f36b6ed805c51f6a481b_JaffaCakes118

Files

4cad162390b8f36b6ed805c51f6a481b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

766197461e27b30669e08442d7d124c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

Sleep
GetCurrentDirectoryA
CompareStringA
GetProcAddress
VirtualAlloc
GetTickCount
LoadLibraryA

user32

TranslateMessage
GetMessageA
DispatchMessageA

oleaut32

VarRound

ole32

CreateObjrefMoniker

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ