dd93e42b8f2937669727c1cc037a8272_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd93e42b8f2937669727c1cc037a8272_JaffaCakes118
Size

14KB
MD5

dd93e42b8f2937669727c1cc037a8272
SHA1

25002b1059bbe6aea8f4879aaf7126044b441107
SHA256

98e8fbdb015be73779959933d4c411f69b21204b312d222b4297279903765d99
SHA512

fa907e1f92c4a7688b88e6e3d412ed7553ac1a5bc19b8b530461c7e69fbf23b63dbce08504db6d2ca3bec4fb652e3bfd5e7fe5cf7df69be6dbfb723cd8fd1451
SSDEEP

384:UBz5jUm56rYwibZK8GVYVOxFPTJzjXZ6r9:UB9jGrYbZGVYVOPpG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd93e42b8f2937669727c1cc037a8272_JaffaCakes118

Files

dd93e42b8f2937669727c1cc037a8272_JaffaCakes118
.exe windows:4 windows x86 arch:x86

982e0d71dd2802d14b00b800de53cbf5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
Sleep

user32

DispatchMessageA
GetMessageA
KillTimer
SetTimer
TranslateMessage

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE