c92343ad38a53fb2418cd6b28f1719dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c92343ad38a53fb2418cd6b28f1719dd_JaffaCakes118
Size

121KB
MD5

c92343ad38a53fb2418cd6b28f1719dd
SHA1

b7f12fe33c2b2bc25f1c0640063c941e8f984c54
SHA256

5c7ca371b8c1b2d93a93a8acaf9b2348a6b64e58f7a59969a4019b39d0e0f64e
SHA512

9a78464ca9b307b0d5790e5bcc4b9376bd49254acfc015926006f187d52fabdda484011c07251d285ca55377a587f2ced1dc5426bf7e9687064051bf862030c9
SSDEEP

1536:/vgnZZ2a6aNz0hqVrezHtObyaSo5ZMxPDsnxZbtNQufuRMaFHM7IwS9BiZlyEqkH:/vgnmjo0kQOOVMm1s3HuKaxmgYl9Oe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c92343ad38a53fb2418cd6b28f1719dd_JaffaCakes118

Files

c92343ad38a53fb2418cd6b28f1719dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0129d95547e02f486bdaeeebb3976701

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
FreeEnvironmentStringsA
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

TranslateMessage
GetMessageA
DispatchMessageA

oleaut32

VarRound

ole32

CreateObjrefMoniker

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ