baf27f94b12cd17024a49b0c315cc4af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

baf27f94b12cd17024a49b0c315cc4af_JaffaCakes118
Size

179KB
MD5

baf27f94b12cd17024a49b0c315cc4af
SHA1

cbd4c3ecf2d579259be1465df0039dea5f8710bb
SHA256

c3c3aeaa8373ad0b0ecfcf8076c508408869f1a85c186b27a43215a208ac38ed
SHA512

ea17d8400f0eb65d8804377d95302f33196489158c73e5dd46d09db6e6ef03f96b0a8f5669f43e6e7457ff58dbc6d153a931ca3f069a4f8efc4f63871e933acd
SSDEEP

3072:EQ/Z4z+f2I2Xy7O2iyW1m/JdTAWIkCxsWkMV4PouW1MI+CV:jRTFwqXdTAwCSWcKiIP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baf27f94b12cd17024a49b0c315cc4af_JaffaCakes118

Files

baf27f94b12cd17024a49b0c315cc4af_JaffaCakes118
.exe windows:5 windows x86 arch:x86

62395f1c6dea147c8c75d7f982a6fe57

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharLowerW

kernel32

GetTickCount

Exports

Exports

��ianideForm@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?FullCtrlOption@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?FullString@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?MomentErase@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?StringFull@@00GPAUHINSTANCE__@@U_COMMPROP@@;F

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 379B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ