ad243bb230983bbabd799959845161ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad243bb230983bbabd799959845161ec_JaffaCakes118
Size

112KB
MD5

ad243bb230983bbabd799959845161ec
SHA1

2dd44a1758a59e572f7e058f8598760a583684d4
SHA256

e2799c18b33931cb5bd67e3f073eccd5116757a3d41c91f04744c430590e2778
SHA512

4c3e03d8b7fb54f3e827c89a0d414b91fa91fa02d9a87d7f74d572c5df00e8f7306153644856393ea4d7489a7f8e6dbb42942522012cb822e01c21e735a292fe
SSDEEP

3072:Mkku4qdkxStJ4p9l8bf4Z6dyqaFFysA6P/Da58k8ak7DfjF:Mz4LJ4p9qbgZwyqaF0MDa58Z7DJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad243bb230983bbabd799959845161ec_JaffaCakes118

Files

ad243bb230983bbabd799959845161ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9076ed4f7d15f9fd483a8b9830e9ffea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetVersionExA
GetFileType
GetTickCount
CloseHandle

user32

EndPaint
BeginPaint
GetMessageA
TranslateMessage
DispatchMessageA

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ