69e2b5873dd3d025cafd29dc441c6853_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69e2b5873dd3d025cafd29dc441c6853_JaffaCakes118
Size

103KB
MD5

69e2b5873dd3d025cafd29dc441c6853
SHA1

b3ce310c8d45d6c94e1ebbb1ea49a914c7fbc302
SHA256

42964a7d8b0795423bd5931024f68f09ec4bc636ac16f5b7da3bf9c673c83e47
SHA512

99ffa82e840c4ca5d9d0284c3150fbe8963f55caa94c2f5a9a7025bc36a4ebb20fe8d3eb28a24d4a752a99aea4385321b4b4b745be8aba37b82ed48a42256a60
SSDEEP

1536:O+Lq1/7xNicqpIB+7fF38Wlf85IXRXEZjC0kM4SpGaM6RTyKE/1oo6jv:TUjT/NQfF38WlKD9SM1MMyIb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69e2b5873dd3d025cafd29dc441c6853_JaffaCakes118

Files

69e2b5873dd3d025cafd29dc441c6853_JaffaCakes118
.exe windows:4 windows x86 arch:x86

34ccf5754a2aa34015804ef1b012fe93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
FreeEnvironmentStringsA
GetProcAddress
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

TranslateMessage
GetMessageA
DispatchMessageA

oleaut32

VarRound

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ