00098c095a2942c69b0b39ce54d94a7f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00098c095a2942c69b0b39ce54d94a7f_JaffaCakes118
Size

5KB
MD5

00098c095a2942c69b0b39ce54d94a7f
SHA1

f707427ad7a3310fa3ac5f7eb4b6efa52ff92aca
SHA256

6dee37cf53a9b6fb1262d74ef84ef8143ed162884246bad328194bf6f643fbd3
SHA512

3f6d00b10157ae1c1a4052757c2df744c179e77e5198557906916b5ff2fc68aeb5ae2571f905dc03f51146ff0fb2efb8a16a5c1f8750106ef1df1809dbd8d1a1
SSDEEP

96:hU00Hv5w6oPkorChOC15fwBoKYUbIYl6wgvP1g:y0EC6oPAOCCxYUbIIbgvP1g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00098c095a2942c69b0b39ce54d94a7f_JaffaCakes118

Files

00098c095a2942c69b0b39ce54d94a7f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1863f9eac1733ec1ba4d796442b911e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

ReleaseDC
GetDC

gdi32

GetDeviceCaps

wininet

InternetOpenUrlA
InternetOpenA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 570B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ