67bb68dfde7caac30953d03a45665f7d_JaffaCakes118 | Triage

Sharing

General

Target

67bb68dfde7caac30953d03a45665f7d_JaffaCakes118
Size

133KB
MD5

67bb68dfde7caac30953d03a45665f7d
SHA1

9289b3b90262cd7b2c0aa43dff810f703d74c5f8
SHA256

4aebce04532f46dab2623f254d5c7e9f6bef60febbef8aa952a76a66a17fd777
SHA512

734072461e72ebca36dbecaccd048f028bff1e926daf255ac050ca10ddb040e4ca03c9f9677e151932cac961b563ef3fb6bb41d77edac25707d0a808ff144b7c
SSDEEP

3072:FAHDy78AgHauKRmK8U2/nrmEt7nSttODKkV5R:FAHO789HafCzCEY+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67bb68dfde7caac30953d03a45665f7d_JaffaCakes118

Files

67bb68dfde7caac30953d03a45665f7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d1f61e67df5a238eae355aeec427ab0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
CompareStringA
GetProcAddress
GetTickCount
LoadLibraryA

user32

DispatchMessageA
TranslateMessage
GetMessageA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ