9346471e3b4106f54d20f2c167c193e7_JaffaCakes118 | Triage

Sharing

General

Target

9346471e3b4106f54d20f2c167c193e7_JaffaCakes118
Size

64KB
MD5

9346471e3b4106f54d20f2c167c193e7
SHA1

2e151b1db2a91d08d4f03f31a19d07acaa78f1f7
SHA256

ef6dd6131521b34ab9898d602c4d32740c078e34857d7fc766d2d1e88f0f1291
SHA512

b4cd4909308dd1c2c533dc1da9b44cf220eb641501821ea348bf1d2a83fe1f5dd140ef3974866fa2c79961d31a021420be931d3ce9565c6d6ccd7f6b8df9f204
SSDEEP

768:2cmBsIqHpm/zP4axYXeW3yWanZ12cDsldKM6cMfdutNYZV5JAmL7VWMXAfTK9rxP:pazpPGdKMrMZP6qZWD6N7gx/m5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9346471e3b4106f54d20f2c167c193e7_JaffaCakes118

Files

9346471e3b4106f54d20f2c167c193e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bcc72ef83efb1f1feb04585842b4fa1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
GetProcAddress

user32

TranslateMessage
DispatchMessageA
GetMessageA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 314B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ