096947ab417d31c01349ffab29121e7d_JaffaCakes118 | Triage

Sharing

General

Target

096947ab417d31c01349ffab29121e7d_JaffaCakes118
Size

2.3MB
MD5

096947ab417d31c01349ffab29121e7d
SHA1

d45027636994e2d399de1bf57ac4e22879ded164
SHA256

2df007d777546a4aff49d107c35182b815015dd3ce82d373550d16a2b4cc0487
SHA512

8ac9da772218fd179f825495b2ba5127f9c50fbb25c88ae740b4f1a461beae666a9330f460237a0d00b5114bec668da6dab89eace1a8cfd0b31a07c371938a75
SSDEEP

49152:71iTJlUeEzHtfd9socWrrQr6+0zZ9nP+FAqX44v5I626TbJMJR0:71Q9itBlHlh+uq/O5gb2JK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
096947ab417d31c01349ffab29121e7d_JaffaCakes118

Files

096947ab417d31c01349ffab29121e7d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

15d057e76fdd756fc488dcaac0149af2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32 msvfw32

GetCurrentThread t#4

Sections

.text
Size: 1.5MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 696KB - Virtual size: 696KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ