d1fe47a2ecca3df51390de394931fcdf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1fe47a2ecca3df51390de394931fcdf_JaffaCakes118
Size

104KB
MD5

d1fe47a2ecca3df51390de394931fcdf
SHA1

8290a5f2f3d7824c351e9da2535fa362aa7ddf72
SHA256

d0cba8c7da832f3e970de749186442086201e682eafac4e99cac688538587c22
SHA512

da0d264934b9e03cd9be378c3f3f0b8043201079ee383990039b384d050ade95902cbad6f3e68482b688cedb3b1e984d1811f5ec24aacf9faf562f1a8638db10
SSDEEP

3072:QtQK4iDLkY3oZucC4Zxe8xnlqG/Q5JAsXre7+OY:QtQKlLH3oIcC4/e8xnlq2cAsXQI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1fe47a2ecca3df51390de394931fcdf_JaffaCakes118

Files

d1fe47a2ecca3df51390de394931fcdf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d477960c5f95b9dba28bd87f39c89e7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
FreeEnvironmentStringsA
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

GetMessageA
TranslateMessage
DispatchMessageA

oleaut32

VarRound

ole32

CreateObjrefMoniker

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ