89e97a199cc215c930fd456c90b03f19_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89e97a199cc215c930fd456c90b03f19_JaffaCakes118
Size

332KB
MD5

89e97a199cc215c930fd456c90b03f19
SHA1

cf5940e5d9ab54825aade72c3cd9efdaf27959ea
SHA256

b3d904c851144ca2e56bdb466b9a85ebd00b6dd015b296f11aeb75df3715e3d2
SHA512

5cac4d16754f21190e4b9322cda8b0d92bf7d1f2a8f98d1d6e03b3f1a358e0f5f7eb5a4789290577fc70c99200774cdd88addae553d5148e0474b668ad676333
SSDEEP

6144:PcddttVQipCNFUxolSokuq9v9Z9iGFBLgwO7c9iT3iy2vXaBYaphg0N:EdDosNxokRF+Upqwieyo5aphg0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89e97a199cc215c930fd456c90b03f19_JaffaCakes118

Files

89e97a199cc215c930fd456c90b03f19_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb38f69427adc4e4db9292580b37817a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
GetVersionExA

gdi32

GetDeviceCaps

Sections

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 265KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

595vyn9z
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cb4eu0h0
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ