4217effae2a71dca3746fa7fc90c04e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4217effae2a71dca3746fa7fc90c04e5_JaffaCakes118
Size

49KB
MD5

4217effae2a71dca3746fa7fc90c04e5
SHA1

2785f559e1da0b56b0bfd323bf914941d0cb2d2c
SHA256

1ad121a30e29f871805a65fb58a19bdc77516d9d0013a527b38218bf9eaaedc2
SHA512

452b6098b47752aeedddcc2657afa7128ca5c0543fe476ed07cac57fc6a75791c757b163d198a87473e8da5dc7351c918e399ad8e2f6dbe2fef03f2cb02e33fa
SSDEEP

768:xZSWHteUCOtJnj1d/TQEnhkq3jvFXTyqLja89quhv5Z65oxccccccccgHlX9BcxS:xADOtJ5ZhFn0wccccccccWX9qGGGiG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4217effae2a71dca3746fa7fc90c04e5_JaffaCakes118

Files

4217effae2a71dca3746fa7fc90c04e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

329f7ddb4e48e57a63acf5d0d05e7cb0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
GetMessageA
DispatchMessageA

kernel32

GetFileSize
VirtualLock
VirtualAlloc
ReadFile
CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc

Sections

.text
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 414B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yc35
Size: 16KB - Virtual size: 15KB