3232549e7d3a27c5487da31871b29ebe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3232549e7d3a27c5487da31871b29ebe_JaffaCakes118
Size

411KB
MD5

3232549e7d3a27c5487da31871b29ebe
SHA1

543931366d3210533d02568f7a5ac5db51062327
SHA256

48893d636625ba76b85627e1e05aa3240af09de20e0b4f28d58e35d004589adc
SHA512

7c1761e3bee4a0e54ba7924b2f922901a3c2f4c4229429e830a504b7dd42c3bca6258c03ac47d53082e0a789b1975ac3a74a76508f200db258e0a3afcbfa7924
SSDEEP

6144:WD+CwJPn8zetqMawiAtUTXcH1Iidcp6/amfPcZU+JrGXGkIprW8YgB/H14BcQAXV:OsnBEDiUydCp6HiKIk8Yvx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3232549e7d3a27c5487da31871b29ebe_JaffaCakes118

Files

3232549e7d3a27c5487da31871b29ebe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3fb863511ecb4e025ef3c40c2a305caa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvbvm60

ord517

Sections

.text
Size: 406KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PgUjGWh0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ