70492d7ce96ea5fd1f3cef18f0555dbd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70492d7ce96ea5fd1f3cef18f0555dbd_JaffaCakes118
Size

116KB
MD5

70492d7ce96ea5fd1f3cef18f0555dbd
SHA1

f3518874a7a2c866f45bc83d925b4be9e3d320e0
SHA256

9c549ee530c2c36c31716019573dbbcba3d6a17b88f9f8cce54e24e17d0da93c
SHA512

97ece823fa7ece2f6d0661fed580f954f11a035f9e9dfdca8149920e47ce3c7d3410771767768e74d5f606ab8af35137d421ca29187ec49d920233b1b3769cba
SSDEEP

3072:Fte0jvAGziWvWwmzLsFeseVnlcLx0rLKjC6rz5:FRYGe3wgsFejVnWyP6n5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70492d7ce96ea5fd1f3cef18f0555dbd_JaffaCakes118

Files

70492d7ce96ea5fd1f3cef18f0555dbd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c9d2599da5bb1732d1be1001f26f0aa2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
LoadLibraryA
LocalAlloc
GetFileType
GetSystemInfo
GetModuleHandleA
LocalFree
CompareStringA
GetVersionExA
CloseHandle
GetVersion
GetProcAddress
GetCurrentDirectoryA
GetTickCount

user32

EndPaint
GetFocus
GetKeyState
DispatchMessageA
TranslateMessage
BeginPaint
GetMessageA
CharNextA

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ