0a910d940604147a2b322e5c3b864164_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a910d940604147a2b322e5c3b864164_JaffaCakes118
Size

115KB
MD5

0a910d940604147a2b322e5c3b864164
SHA1

4b5cc9b28b07c56849614fedee9906019fbb8f8f
SHA256

938a4a651236d5a48df5912cb7722e020693b5d76e69a053d24b43b5dbe008f5
SHA512

2bd6974e72b76fdf099c876652da08e8dd00db778234ba9d6b2a557e9654d1e615cab24c848a27da0712f3c7d5f8ccf7652a3128434d8a4bf47f10de3f844491
SSDEEP

1536:UBer26XG4gTrODSq41pKerbi8dFVed+qTCM7VG6rWrwobUew0Luyn:UBerl4TrOgSerhdFVedxRWrwoweCy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a910d940604147a2b322e5c3b864164_JaffaCakes118

Files

0a910d940604147a2b322e5c3b864164_JaffaCakes118
.exe windows:5 windows x86 arch:x86

873122506a3d4ece4117f868c969a212

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCurrentThreadId
VirtualFree
SetCurrentDirectoryA
Sleep
ExitProcess

user32

GetDesktopWindow

Sections

.text
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Bfacy Sq
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Eybjulpy
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Brhtxxyh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 275B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ