2dc5359f4d0f56ae409b63b9adb6f395_JaffaCakes118 | Triage

Sharing

General

Target

2dc5359f4d0f56ae409b63b9adb6f395_JaffaCakes118
Size

108KB
MD5

2dc5359f4d0f56ae409b63b9adb6f395
SHA1

e21c8b5feef406f22d893163621a9c2a3b8e0d56
SHA256

da941767e5ebb649c234ff3ac769133fe778e63c96b16361853a932913cd773b
SHA512

ba42b27a16262b379635ac2194366eff1f0070cd6819ddb230af48a09ee349c8cc642492023e0156b1fd9589a1c5874ffefa1293789a4b305c5620e94467a3f1
SSDEEP

1536:NGi7JGjK7mb53TJZgsEIfdABaii5+vyHlswPZK0s9tPh8VPl4B:NGXemb5Fs8z5zFsiZK5Wm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dc5359f4d0f56ae409b63b9adb6f395_JaffaCakes118

Files

2dc5359f4d0f56ae409b63b9adb6f395_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81c39931ec4224b6e145cca352129746

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
GetProcAddress

user32

GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ