df50a42aac7f1a7640278ce539468652_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df50a42aac7f1a7640278ce539468652_JaffaCakes118
Size

104KB
MD5

df50a42aac7f1a7640278ce539468652
SHA1

173aeae3ee194aa4d791829997e073189bd294c0
SHA256

49ba01b7fc0a387cf187294d15a6fa3af21d6b78a37770da0c3a70490db84fbe
SHA512

5d49d6f633f0499925860b00e1f6121850db170921157eb8c42c01ccdac257b60b1a691c853f4478dc83084fd34ccd22de101a3c697530c4e02e7e4e2332b8f4
SSDEEP

1536:wpiasl+8R9cJ4ee0PtH8L6P7QNBLnJaYZhrF9gyllLeeiibTV/HXB8U91xdyF:w7+5/L0PtSE7QbjXrYWuYhvBhldu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df50a42aac7f1a7640278ce539468652_JaffaCakes118

Files

df50a42aac7f1a7640278ce539468652_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45bf192f232804cb68b79b7e712812c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
FreeEnvironmentStringsA
GetThreadLocale
GetProcAddress
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

TranslateMessage
GetMessageA
DispatchMessageA

oleaut32

VarRound

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ