c0bd291e4853fda4bc77a6302a56f90a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0bd291e4853fda4bc77a6302a56f90a_JaffaCakes118
Size

123KB
MD5

c0bd291e4853fda4bc77a6302a56f90a
SHA1

a53f8906e26145cb0b227c64f69e75e51c458d24
SHA256

1bf745d0da21ac993acde31fa32dd8010db6f6f9f3a6371f32bfd245342581fc
SHA512

b14a6872d8069e4cc1ef877ce24bbcc55014b1761342424d87ded3e7f1b96b98bdd794584f97410a5d80a2590c6bf520a74acc4ed0e0815e4fbcad679e385615
SSDEEP

3072:DbRioTyqdE2WnwUdWILoCIPvFGuMl6fjjmkv:DbR1E2WnwUIIDqvFGll6fjv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0bd291e4853fda4bc77a6302a56f90a_JaffaCakes118

Files

c0bd291e4853fda4bc77a6302a56f90a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d477960c5f95b9dba28bd87f39c89e7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
FreeEnvironmentStringsA
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

GetMessageA
TranslateMessage
DispatchMessageA

oleaut32

VarRound

ole32

CreateObjrefMoniker

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ