ce889eb7ce229e04dad5a604364cee54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce889eb7ce229e04dad5a604364cee54_JaffaCakes118
Size

103KB
MD5

ce889eb7ce229e04dad5a604364cee54
SHA1

00c5646a4fbae2cf10f4c3720564f077b56da45d
SHA256

2af8f9b97e9b2765257a6c20e416d8e247f32bc0dbbadb600e18e1b817ef1688
SHA512

5798e4a08b144dd3b74ddf3ab53012d8726095e2088e104d9d5d5df81e7d8cd1b63a0121a0fe606f25e5c54f4ea0e595974eb38be8326cf37b3fad1253bbf360
SSDEEP

3072:uy+eMDOYhGAI086QX85kn+i9LMkeL4QIoeuk:p+DM3X8m+WYknfuk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce889eb7ce229e04dad5a604364cee54_JaffaCakes118

Files

ce889eb7ce229e04dad5a604364cee54_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8bfa185704d7596299b5109bf35120d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharAlphaNumericA
IsCharAlphaA
GetDC

kernel32

GetProcessHeap

Exports

Exports

?FounderNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalLock@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalPointer@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalSpeed@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalWeight@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalXern@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityCover@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityQuan@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?ReactNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 1024B - Virtual size: 623B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ