e9979b1e731e7218304839cc5ae443a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9979b1e731e7218304839cc5ae443a9_JaffaCakes118
Size

71KB
MD5

e9979b1e731e7218304839cc5ae443a9
SHA1

833045afefeb987062d94d308243e9c407d985e8
SHA256

79e8c7aa7e1a850c559afef0c55815084461757592e87b8017f879089d83c60b
SHA512

191c1cc35b70a7357b6a8a141aa2632f0d687963cee8dad7624da2f4f7290d1eda0d6473ee6693975a621b6ca640ed44a80b64f4e1288b56ff7b30d344b999e5
SSDEEP

1536:CgkcA9pmwhQ4flXdvB5oNCLAkDaE46yO0rhXwfA:Cz9Uw+eXJjMCMk+iyJtA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9979b1e731e7218304839cc5ae443a9_JaffaCakes118

Files

e9979b1e731e7218304839cc5ae443a9_JaffaCakes118
.exe windows:1 windows x86 arch:x86

995586ba856ec0c6a8c60702ffdd598b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatW

user32

DialogBoxParamW

Sections

.text
Size: 64KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

uhrs
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE