096a1a881e7943605430d4e043d7839e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

096a1a881e7943605430d4e043d7839e_JaffaCakes118
Size

77KB
MD5

096a1a881e7943605430d4e043d7839e
SHA1

d32c6fc728ec37c48fb769162ee7c8c88d4c01ce
SHA256

b7a940923700d1e56a6f1f934e262821168a9fb5e1e0c9ea11c60de0acacc020
SHA512

5f1d53edd49a4a496c083cb256d259e36c1633dad6c06a8fc28ad5cc2fe359a600daa60c7da088cc11f55da8b91bf1d6622b8283534464b007c6463c5510b015
SSDEEP

1536:FJ9sPMk5vyeLiflm1obSp/UX3s20mRuYWzy:FJePMEvykKM1qSeX3luYWz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
096a1a881e7943605430d4e043d7839e_JaffaCakes118

Files

096a1a881e7943605430d4e043d7839e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df03cdcd31346a5133a1319d89165224

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFile
TerminateThread
VirtualProtect

shlwapi

IsCharSpaceW
ChrCmpIW
StrCatW

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ