0f392bb2b5ce926d8cf1aef5190fa374_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f392bb2b5ce926d8cf1aef5190fa374_JaffaCakes118
Size

100KB
MD5

0f392bb2b5ce926d8cf1aef5190fa374
SHA1

525d94bd690fb9313f07b7c608f36ea8117f1c06
SHA256

c4b6bc49f4f3a8403651a7cddfdf4e606f38c47bba6bffff37c0bd7f6a48cdc5
SHA512

5ad6521df00806f570cc7e3dd8be0f0833dfcfec328881b7efc8bc178e08c817a327c7b7fc9d7ccdc17883f9dab6b368d02aca295dcdad7b0de5ace556a23ea8
SSDEEP

3072:/IIIYjOL+wO3ygTZzbcUegyt3Bmt5t9NRvJ:oL+wOrAtg5tlJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f392bb2b5ce926d8cf1aef5190fa374_JaffaCakes118

Files

0f392bb2b5ce926d8cf1aef5190fa374_JaffaCakes118
.exe windows:4 windows x86 arch:x86

953c971d017c7c4de8f452b68ee34dfc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
VirtualAlloc
LoadLibraryA

user32

DispatchMessageA
TranslateMessage
GetMessageA

oleaut32

VarRound

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ