c09f8e6ea23227ee77432083de720c1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c09f8e6ea23227ee77432083de720c1d_JaffaCakes118
Size

30KB
MD5

c09f8e6ea23227ee77432083de720c1d
SHA1

f2a4bb051572cf7b15d9de3b9d42a54f3ae871b9
SHA256

c12e808034fd81cb3e9bb790c5f321c44d8fa4b2dfcb2c31661af4c21016b719
SHA512

20edba419cf81a894c453242cf147249134f8ad9463705f1c23b8fbc2b231df67287d8c3b3ce9fe5fd5631a899721c72aa45ef94abde326a78b69899a1ea6414
SSDEEP

192:nattaVh55rRJakSY2uQpINk/BwhmXVbRjJrYgxzLduB7sHn84c:natIXNaJVuOINkdXVtjJrYgxHUB73

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c09f8e6ea23227ee77432083de720c1d_JaffaCakes118

Files

c09f8e6ea23227ee77432083de720c1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f767e3d5e1f0a1eae9ef2f1b1390f40c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CompareStringW
GetCurrentProcess
GetModuleHandleA
GetVersionExW
LocalFree
MultiByteToWideChar

user32

CharNextW
GetMenu
IsZoomed
LoadStringW
UpdateWindow

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ