0da53bb164bc88d342ed13dddfec9a1e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0da53bb164bc88d342ed13dddfec9a1e_JaffaCakes118
Size

864KB
MD5

0da53bb164bc88d342ed13dddfec9a1e
SHA1

bb6c6434dde1691f94ae50a6c002df54c543d243
SHA256

cbcda38054fc910522550d5d4733787743a6b71c11e74a5413923344661a6c65
SHA512

9e4282a8eb074d80f37a65cd1662699f3853445e7aaf5a55829306be43b960dcfac0b6a857f162a59ae4f74eaefa67ca967aae832d4e1c10fcdf15733bf28c78
SSDEEP

24576:Xa4ITbJ7B8aq+Q8OT8BfJSIQCDJ0OXNSEu:q4IT9U6pOEJ0OXNSj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0da53bb164bc88d342ed13dddfec9a1e_JaffaCakes118

Files

0da53bb164bc88d342ed13dddfec9a1e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88381b84da56810b869e897e6d45bd58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

EnumChildWindows

Sections

.textbss
Size: - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 351KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 200B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.main
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stub
Size: 388KB - Virtual size: 392KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE