258eb64ac672c816c15de1aee19b7d34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

258eb64ac672c816c15de1aee19b7d34_JaffaCakes118
Size

104KB
MD5

258eb64ac672c816c15de1aee19b7d34
SHA1

19048aac17c9cac2c3b3175c731431703be15e41
SHA256

62841bd3f43b72883f619b9dd083ffd23825478864e251f8ce4efd67713a93ef
SHA512

ad093f59e8c93ea7dcc9832fef24ac8e9bd590818be0d45bb0fd7467bf88a864a7b24121db15f1799988b14072ab1c56d4d810ff41d97255a98ee5c93c85451c
SSDEEP

1536:1gxspP+WeA4JCxMFOajdCzPE28rCPX5hAFVBjV+7NuJFNJYDFjSVAO6RkxdQ:1gYP+VjSOKphAFVOoluOOSdQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
258eb64ac672c816c15de1aee19b7d34_JaffaCakes118

Files

258eb64ac672c816c15de1aee19b7d34_JaffaCakes118
.exe windows:4 windows x86 arch:x86

395b269a61b86afaa49f24a6e1726c2a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
FreeEnvironmentStringsA
GetProcAddress
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

GetMessageA
TranslateMessage
DispatchMessageA

oleaut32

VarRound

ole32

CreateObjrefMoniker

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ