649db39af5224644bafe5e373c1ca9b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

649db39af5224644bafe5e373c1ca9b1_JaffaCakes118
Size

80KB
MD5

649db39af5224644bafe5e373c1ca9b1
SHA1

5978c5137320d5bc630434cc8c7af0bcc586c369
SHA256

fcdebf4a2bff25a8b64df75d6d9794c89da1ca094e71021426d0fb805fba2495
SHA512

592627deea2d014112de7caada38c187c49c53142d4f328aed255602b280fe2737017765a575aea3f9c1167b060ade75382499279b8c87829f355bb457f86ec1
SSDEEP

1536:C1O0AYwudooOlnXaoYzG6YbxlP8mwsg8KKzYPqlvHguM4rA5g9zJ32BVPneDMe3P:W+lXaoRdlP9wszpNAn4rUg9zJ32zPnQ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
649db39af5224644bafe5e373c1ca9b1_JaffaCakes118

Files

649db39af5224644bafe5e373c1ca9b1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a51e9816cfc990ceb97fc1e45f4338c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrChrIA

kernel32

GetTickCount

Exports

Exports

��ectorARM@@00GPAUHINSTANCE__@@U_COMMPROP@@��?SectorGEO@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?SectorGEO@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?SectorHall@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?SectorRade@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?SectorZero@@00GPAUHINSTANCE__@@U_COMMPROP@@;F

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ