29bf7bf8a6ebf9d00999c0c273ee89bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29bf7bf8a6ebf9d00999c0c273ee89bf_JaffaCakes118
Size

842KB
MD5

29bf7bf8a6ebf9d00999c0c273ee89bf
SHA1

d49d21d89f2c289c668d933d9dd8bd3dc6800b88
SHA256

dd812451c09f043d980ab8fc6332e9b6c72f7646ddf6e75fafc755eda2ba4d16
SHA512

f404829ea1a2f598a512617e7188d0a74445b7d2a1b9d5cec08e5cf3b62bbf598f1d69f9cbfbf1b62b556864018b9abac234da4205672bd6a9c7b9ae7944dbf0
SSDEEP

24576:J9vQyU95OSATBpjISMF2vgY6xkCn2CSuZU84:J1Qy25OZTBRIUgYfCn2+U84

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29bf7bf8a6ebf9d00999c0c273ee89bf_JaffaCakes118

Files

29bf7bf8a6ebf9d00999c0c273ee89bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfc2d556c3df1e5126e21cc9d5a197a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalSize
VirtualProtect
LoadLibraryA
GlobalLock
GetCommandLineW
GlobalUnlock
GlobalFix

user32

RedrawWindow
DlgDirSelectExA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA21
Size: 3KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 803KB - Virtual size: 808KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.e4355
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ