94234fc61ce801495632c89f3bb2d04e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94234fc61ce801495632c89f3bb2d04e_JaffaCakes118
Size

116KB
MD5

94234fc61ce801495632c89f3bb2d04e
SHA1

f36caad97402d8be9cc44656b038892fb7774b51
SHA256

34d1a37041d90999cc28712cf6863338e7c08a3fcd1e5f8cd1c6df96302b833b
SHA512

e9b6b4ff46b54d243ac8a295ae975498497a776d52aae096bf6683150ae7b9b8aecb22bad853e275b22c8687e1999a7c621304f1ba88808e39ed9aa592810194
SSDEEP

3072:e3bMMVUjN3+TLvJV7TBmDJqPn0/vplCHT0F:e3bF6jd+TtBBmts0XDCHs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94234fc61ce801495632c89f3bb2d04e_JaffaCakes118

Files

94234fc61ce801495632c89f3bb2d04e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3f6a783f7093f1684c6ee5a60aa9dcc9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
lstrlenW
VirtualFree
Sleep
ExitProcess

user32

CharNextA

Sections

.text
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Gkifcjnp
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Wvhrw. G
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Fmmnmabd
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 225B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ