e259bdb9c48bc0efbff09a97a2a51e4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e259bdb9c48bc0efbff09a97a2a51e4a_JaffaCakes118
Size

226KB
MD5

e259bdb9c48bc0efbff09a97a2a51e4a
SHA1

35123de947751eb1d4d7883a4fedee36acaf9857
SHA256

8e6c724cf44f46c870579e9e4a02ba2604fec806c4aa7c599573268ca6efeae0
SHA512

e89673553df3888e4d1f89046d75c5c99229650dbdf3a0a4d5e40b6083058d20e3935b36d93846627cb99bf61cd52a4db36dfcdf42f3fef49b52797844809785
SSDEEP

6144:zzsKl57ik6ZI3VAq4kj1BUfBdLGg4py++Ea:zYKveZIFAyj12J3qy++

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e259bdb9c48bc0efbff09a97a2a51e4a_JaffaCakes118

Files

e259bdb9c48bc0efbff09a97a2a51e4a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Hartbadmewe~\amuhdeallssopba\sawpowsodashonkef\entowsobfluxMaesgad\shismedpisKalenebed.pdb

Exports

Exports

KillHeightW@16
InstallModule@4
IsNotMutex@4

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.psikif
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Tide
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hodta
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ