29191739e178180b3478482b9fc9c4e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29191739e178180b3478482b9fc9c4e8_JaffaCakes118
Size

119KB
MD5

29191739e178180b3478482b9fc9c4e8
SHA1

c3c24eb3126b82ef82c9860486e7b4b555061da0
SHA256

9eead698f55fe267ee57ad5730c1460e5dd5ba667e0e089279d42e0d5ebaae04
SHA512

ef1ca82717ed3b952c8daea84c6501f6a8afc57a3d89cdb8476d17d7e30f8202300a3452b327b0b06d455da9da6dbba38d4b8c8b83b8b1f1c30b252efd957350
SSDEEP

1536:d4YB0ieFTLaC48+QcGkFLlE0IyfyIoLyc1MZuZdBbIjr6stYRL2id4bE2akruGeW:dJB0iYNiFu2cuZuZrbQ/6L29bES7FDEC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29191739e178180b3478482b9fc9c4e8_JaffaCakes118

Files

29191739e178180b3478482b9fc9c4e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc6b327f957789c7470d4de6af4b02ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
VirtualAlloc
LoadLibraryA

user32

TranslateMessage
DispatchMessageA
GetMessageA

oleaut32

VarCat

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ