879101bd9faf0db231496dce4d17fbee_JaffaCakes118 | Triage

Sharing

General

Target

879101bd9faf0db231496dce4d17fbee_JaffaCakes118
Size

104KB
MD5

879101bd9faf0db231496dce4d17fbee
SHA1

617410fa24916feae598f8c1597331bbdd4f5546
SHA256

ca7de1fd01f435c0ad3c238f018c448efef6b92e6252f42e0410b2bfd945603c
SHA512

0eb8ded1c4553d10262dfb768531b505cdc0e33f6fd50872d0b439451a298cac5a8ca557e12ca9fdd34654418ee78904a1955f62ec9e3e3e86f69b459b1960b9
SSDEEP

3072:kBPXhoMWaFh6MCYBryAZINjyVEGhBDxWjYwP:mHWa36MDGAZGYE4BDxvs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
879101bd9faf0db231496dce4d17fbee_JaffaCakes118

Files

879101bd9faf0db231496dce4d17fbee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

82262b3d57e463fc4d82cb5b10adbca5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
FreeEnvironmentStringsA
GetProcAddress
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

TranslateMessage
GetMessageA
DispatchMessageA

oleaut32

VarRound

ole32

CreateObjrefMoniker

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ