dc2e570e36e1cf10f752f01067ef389e_JaffaCakes118 | Triage

Sharing

General

Target

dc2e570e36e1cf10f752f01067ef389e_JaffaCakes118
Size

67KB
MD5

dc2e570e36e1cf10f752f01067ef389e
SHA1

17549ac6c5cffd72fa1fe236a218616540a82fcc
SHA256

2b3ba610bb1bbd0814a8d541ba93944aca7e3d24a1f02766210679255d09850c
SHA512

bbae5fd53703afefd6f8a2c4fffb4b9442d949ab710970c1f92733cd2fd72a357e832e0c14f469bc586d282bfdf83819334b62b7e2765879a0b198207902e845
SSDEEP

1536:AbbzvtYTLUVYFQSEYBnFr6GJ0zR0ThRsi1o6:YbeTyYFQeBFLmctV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc2e570e36e1cf10f752f01067ef389e_JaffaCakes118

Files

dc2e570e36e1cf10f752f01067ef389e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

395b269a61b86afaa49f24a6e1726c2a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
FreeEnvironmentStringsA
GetProcAddress
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

GetMessageA
TranslateMessage
DispatchMessageA

oleaut32

VarRound

ole32

CreateObjrefMoniker

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ