2d6b253a6b1441d132e7df9350a546d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d6b253a6b1441d132e7df9350a546d2_JaffaCakes118
Size

57KB
MD5

2d6b253a6b1441d132e7df9350a546d2
SHA1

8c3f9bd14e5c58f0e325ce8da61d75fe08bd27c9
SHA256

d2e0739ae711a3c2076da52fbce1de973000b7eeb2e6f9805a627cc42789b6f0
SHA512

9c73dd6eaed0acad14fb1273de02581e9939f1a3ad946867394cc6d661dfa63b9d8f47ccf5ad6cb705213c380255ede313dc97f28413edd9436c4bd8b75bc4be
SSDEEP

768:gR3vC78Vgzhp2Qv+UghzefHxnMkjeg2SJlNIAdWYGc1ttQqpppppfv+:gKSgz3QzefHlFZJl6AdtDbpppppfG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d6b253a6b1441d132e7df9350a546d2_JaffaCakes118

Files

2d6b253a6b1441d132e7df9350a546d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

766197461e27b30669e08442d7d124c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentDirectoryA
CompareStringA
GetProcAddress
VirtualAlloc
GetTickCount
LoadLibraryA

user32

TranslateMessage
GetMessageA
DispatchMessageA

oleaut32

VarRound

ole32

CreateObjrefMoniker

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ