aea8c3cd4e624ce48ee63bc0db940e21_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aea8c3cd4e624ce48ee63bc0db940e21_JaffaCakes118
Size

100KB
MD5

aea8c3cd4e624ce48ee63bc0db940e21
SHA1

8f21e0e8ec431367f032331cf05bd4222ce114c2
SHA256

eaca990476ba660c839652b980bee34f1bb6ee4313129e9d309199267226a15a
SHA512

e2c89b502ae9d40065bd4e38614a13a07287e14f380ef404c47795e4defa3e2bb8d333ae1bbc3ebc371e78e8166993fd42ebb8770ef0768eb15de4650f17683c
SSDEEP

3072:hAlfURlva+GKI3SrAIpZ1LggcAT6fC++WAP:hssRli+ZICEIH1iAmF+WY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aea8c3cd4e624ce48ee63bc0db940e21_JaffaCakes118

Files

aea8c3cd4e624ce48ee63bc0db940e21_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea102a6c92db52adc357d42e011d09b0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
VirtualAlloc
LoadLibraryA

user32

DispatchMessageA
TranslateMessage
GetMessageA

oleaut32

VarCat

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ