8a3c8838f38050ed416934ea7a7cd443_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a3c8838f38050ed416934ea7a7cd443_JaffaCakes118
Size

169KB
MD5

8a3c8838f38050ed416934ea7a7cd443
SHA1

8466a85ad50cc480894214858219414ee4de2078
SHA256

46b20449b47374b3e0f76f399fb8fd483120c35b48f5046bdfb64202b939a8eb
SHA512

cb4d1cb2168963fe104f32a2f44ce7b537f9df5384412bbc4116feb632f313193fab7d0aa75aa72dc58d15e33c43b3faae374fad2b49cfd940d3c642d2986210
SSDEEP

3072:JGcvFgUU/F0FCml+Nsph6Neol3SLVuA/li7sFfQxgoMbVlOyE1aKKcW2pPHG4:Q+Fg//wCXsa3vA/vfHoMxlnEPKcNVp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a3c8838f38050ed416934ea7a7cd443_JaffaCakes118

Files

8a3c8838f38050ed416934ea7a7cd443_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc6b327f957789c7470d4de6af4b02ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
VirtualAlloc
LoadLibraryA

user32

TranslateMessage
DispatchMessageA
GetMessageA

oleaut32

VarCat

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ