0af2dad98fb35240ec7d5a92a9d87d42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0af2dad98fb35240ec7d5a92a9d87d42_JaffaCakes118
Size

53KB
MD5

0af2dad98fb35240ec7d5a92a9d87d42
SHA1

dd4aab7875d4aa4c7b1d5b59e6543d5be23bbba4
SHA256

d6d0569e45c674575f3bc4312d23a23e5617e0365aae52e174327304d8732479
SHA512

02649c0e6ecee675ca503085bc3ca43065965bed2d6fdc66ea3681458899194a29a8c2b8d363feb5f79b24b1d4cf66f15db8d5b67c6abcaf8821985206f103c5
SSDEEP

1536:CxtzZN+rtO6YbxlP8mw9PVvvfSynTB4bd2ivKk:ctztdlP9wxT6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0af2dad98fb35240ec7d5a92a9d87d42_JaffaCakes118

Files

0af2dad98fb35240ec7d5a92a9d87d42_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a51e9816cfc990ceb97fc1e45f4338c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrChrIA

kernel32

GetTickCount

Exports

Exports

��ectorARM@@00GPAUHINSTANCE__@@U_COMMPROP@@��?SectorGEO@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?SectorGEO@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?SectorHall@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?SectorRade@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?SectorZero@@00GPAUHINSTANCE__@@U_COMMPROP@@;F

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ