d335becf0ba5d63704c48df7e8e13d13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d335becf0ba5d63704c48df7e8e13d13_JaffaCakes118
Size

63KB
MD5

d335becf0ba5d63704c48df7e8e13d13
SHA1

d8f128899e53db992b9350ba7253118eceec7c2f
SHA256

3a018d16e3321c62a23a80a0b4e3f1e8c34994025daf354fb01bc57f71d4231e
SHA512

d14f23ab1b7627cf6a8678aa558d2904112144456579ab5d74facefd321cf48c5b1609a4b1aaf54e7a25ed71c788339deeb6188b2bc20eeb2c93009a1bfd2e2a
SSDEEP

1536:2ZYM05gLgVuOHtdbWJLjAuf8AaAVZqnjtOfO:2CM05hg0dE/AuNamqn0fO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d335becf0ba5d63704c48df7e8e13d13_JaffaCakes118

Files

d335becf0ba5d63704c48df7e8e13d13_JaffaCakes118
.exe windows:4 windows x86 arch:x86

014f65d9b65c5219395f6fe276e518b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
FreeEnvironmentStringsA
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

GetMessageA
TranslateMessage
DispatchMessageA

oleaut32

VarRound

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ