a2fa1f497dc4f58cd6aae48ea451592b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2fa1f497dc4f58cd6aae48ea451592b_JaffaCakes118
Size

107KB
MD5

a2fa1f497dc4f58cd6aae48ea451592b
SHA1

17d28460473a70f742456f9b42b80d71014cdcb4
SHA256

6f0c39057aeb45541d9a42267838728063f8211dd629b4f1bca4fa1e6753ab82
SHA512

1ecd40840a95103038985e2ee1b2e8171d5683189e6d95a2c4575a5becd78fe97fbb165e3fc9e7f21eaf681549d9301714f6564b7917ea0bfd0b93a393a70d0c
SSDEEP

3072:WC7FGCdsf6x0uX6tD1D5ntqxUPHC6TIRQDcA:WgECOFu4C1RmX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2fa1f497dc4f58cd6aae48ea451592b_JaffaCakes118

Files

a2fa1f497dc4f58cd6aae48ea451592b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38f7b0d9532a5b29b65f57a56f7cf437

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
GetProcAddress
LoadLibraryA
GetTickCount

user32

DispatchMessageA
TranslateMessage
GetMessageA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ