7124ae1fb9a89a721e39bdb970ccd26b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7124ae1fb9a89a721e39bdb970ccd26b_JaffaCakes118
Size

65KB
MD5

7124ae1fb9a89a721e39bdb970ccd26b
SHA1

2bfb100d0eefcfb449cf272390077f88462c6d28
SHA256

bb175585968d8c0af884de4bf645d6312f33d0026d9890ecb9749469b6646b86
SHA512

990f5b8c3e2628d1af5dcb6b8a881eed8a2f176ba09cf28553abe2dda18f7f3fda92bd87a54f1d435015c061aa880039408179e8157fccbe4cc955b4a8e5e4b8
SSDEEP

768:OQxkwifBsIqHpcrkMEYEhA7P4RhAtmaZFb79U9MKAjBEig6/1k21m3uHRdMNDj2N:O8kwilTEhU4HDa1KkjWXUa21mc/Mue9g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7124ae1fb9a89a721e39bdb970ccd26b_JaffaCakes118

Files

7124ae1fb9a89a721e39bdb970ccd26b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bcc72ef83efb1f1feb04585842b4fa1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
GetProcAddress

user32

TranslateMessage
DispatchMessageA
GetMessageA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ