14e622787033757720813d7b66c3f3e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14e622787033757720813d7b66c3f3e4_JaffaCakes118
Size

104KB
MD5

14e622787033757720813d7b66c3f3e4
SHA1

30f79459283888243378346f3ed515665b246eca
SHA256

ce5eff345519c4509ee0d984852fa819b9596abab3cf2af70e7009a57197116c
SHA512

3c89465884a24b97e05eb932ce38e6eaecad1a2d27a62d0234113ddf83387a9d9caa2a679442e0ba759ab7ad3b262398297fa99b65a6bcebcaafee78d7608934
SSDEEP

1536:4B+Ih+fkIGJEEs/fOrMK+QKq9c5UCRauDEvRbttpVB9Oqv7TN:4Bj+f0e/bSK2AvRdEvRbDOqv7TN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14e622787033757720813d7b66c3f3e4_JaffaCakes118

Files

14e622787033757720813d7b66c3f3e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bcc72ef83efb1f1feb04585842b4fa1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
GetProcAddress

user32

TranslateMessage
DispatchMessageA
GetMessageA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 314B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ