216a79e5fea4b57b4c565971aa642772_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

216a79e5fea4b57b4c565971aa642772_JaffaCakes118
Size

188KB
MD5

216a79e5fea4b57b4c565971aa642772
SHA1

017f62b3f978b0837b792f61df51708f8f981515
SHA256

db1f7efced169fab27716126481ecc8642bca9d925fd130b567ed634196a3003
SHA512

a80cf8a512e0ca02a0ebce95246802f362eac340e83b659b8f2f56292d8571b686df77f599d5c8bfbb4197a72783939d4d67b1ba0673bf281e69c0331a93bad8
SSDEEP

3072:WORMbyRfVt3CZP4d5Jp/y6HP7Fmw2bAyy4d1LrHKAZJlRHGuoVYY/oUOlKO:y25umd5JhyehLQJjLLfaKYvM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
216a79e5fea4b57b4c565971aa642772_JaffaCakes118

Files

216a79e5fea4b57b4c565971aa642772_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c55dae4ee4134cf6f7af4b9cc4f8e5dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

IntlStrEqWorkerW
ord29
PathCompactPathExW

kernel32

LoadLibraryW
GetModuleHandleExW
GetModuleHandleW

Exports

Exports

?ScienceInterupt@TRFDJE=L

Sections

.text
Size: 24KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ