c9045001471f32d5181506401f1b4985_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9045001471f32d5181506401f1b4985_JaffaCakes118
Size

122KB
MD5

c9045001471f32d5181506401f1b4985
SHA1

c8c2d9216e330de421c5b399da87eff25c95a58d
SHA256

da02134d02358c0bcb0065c077b8294da09f439fc8def49e7e8a5b40a393aef4
SHA512

9747d35f2b5e667d3d5a6ad2aa64f082746f252ee34dab4d26d264780c8da0687ab2289d2e0cf554714da5eb96d17132b4092e864c64a3e7450ba93e1263cc67
SSDEEP

3072:g9XsxsUuB4C27e78rrQuTP1lqzEWBIhJ34pd+:CXsXuB4tN0EqzVuh5II

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9045001471f32d5181506401f1b4985_JaffaCakes118

Files

c9045001471f32d5181506401f1b4985_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0129d95547e02f486bdaeeebb3976701

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
FreeEnvironmentStringsA
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

TranslateMessage
GetMessageA
DispatchMessageA

oleaut32

VarRound

ole32

CreateObjrefMoniker

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ