0d3c8b161d045a653e74ef62576c2b34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d3c8b161d045a653e74ef62576c2b34_JaffaCakes118
Size

35KB
MD5

0d3c8b161d045a653e74ef62576c2b34
SHA1

06daa0229178abd4025f89c4f18e93f0b1b60b9b
SHA256

d8aa7a50a4e5802d97aff568cd1127cfce43893e2e574d13ddbbdf2597923c84
SHA512

589398a87e347efc39477dde8ebfdfb95889c77209925e9dae5e47830e1c906f9d8fc0666828f7a55a02c098f98932e7f6221a64825379290451faa478b6aa7e
SSDEEP

768:uApSrPB87QU0YaZBx7L6OnwlK1CR0w5g0ruyhlF:h97I7L6Ond1CCViu2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d3c8b161d045a653e74ef62576c2b34_JaffaCakes118

Files

0d3c8b161d045a653e74ef62576c2b34_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0d3d2d3a357e37d5ed1dcbbb552ac5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetSystemInfo
GetProcAddress
ExitProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ