be69f06b42bb9523e2593a1b654195df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be69f06b42bb9523e2593a1b654195df_JaffaCakes118
Size

133KB
MD5

be69f06b42bb9523e2593a1b654195df
SHA1

1de0a2dca0dbc5dc9ce3b92b3568ba0653dc93f0
SHA256

1879f4a180ab4b591c8dcb404523f2d621f534f1602a53200133a5290533e195
SHA512

0f85834dc75d52b44034d7f902d1cb75ea7c79387bbfbfbc74b9861c4becbe6fdab457b328bce5b08361415894e2e2f1987c810d8b7b5b8d859fa3eddc63a889
SSDEEP

3072:S1ZFj37ntz8Vv8VLbv7MAOK2AXTAkMy4igTaEa75:S1/D7Z8t8BvQA3zfL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be69f06b42bb9523e2593a1b654195df_JaffaCakes118

Files

be69f06b42bb9523e2593a1b654195df_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8800d15317235ed911a2c4def2f2e45e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathCompactPathExW
ord29

gdi32

GetPixel

kernel32

lstrcmpiW
GetModuleHandleW

Exports

Exports

?BingoGetOut@!PEH_KK:X

Sections

.text
Size: 26KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.irda
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ