c1280f73820e3dd1af2376f66e2b5cd4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1280f73820e3dd1af2376f66e2b5cd4_JaffaCakes118
Size

116KB
MD5

c1280f73820e3dd1af2376f66e2b5cd4
SHA1

c74685db6fae7d03f9d65726c4a4aeff05e972ed
SHA256

197e862491cf519a3ee69cc14d30a2d3d6dfb14fdbbd18d47f9081969df2bd0f
SHA512

07708c0d5b55bfac0601d3941c36dea5808cb1d1cf0624d6dda88903c15d08a70bb8acfa9aeabc607ef0d864038d57f91e9a8e4b67830604f9958f6f3b6f3442
SSDEEP

1536:VO7h+OYfpkOggNls+OSRzpJS4rwPQV+a53RTVF9ZB4L72uvbLC4yjPLJysAy2rv8:Vw+OYRkCpOkp1rwi9p1ZB4Wuzmasbkv8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1280f73820e3dd1af2376f66e2b5cd4_JaffaCakes118

Files

c1280f73820e3dd1af2376f66e2b5cd4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1efecf0fbd862b9a56e0019ba21dbabd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetFileType
GetTickCount
GetVersion
LocalFree
CompareStringA
LoadLibraryA
GetProcAddress

user32

TranslateMessage
CharNextA
DispatchMessageA
GetMessageA

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ