d57a71e4bc02a29d279877438c3bf9ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d57a71e4bc02a29d279877438c3bf9ab_JaffaCakes118
Size

265KB
MD5

d57a71e4bc02a29d279877438c3bf9ab
SHA1

308f2ab772a87217444033a49a9a5d88d763fc7f
SHA256

43a6366fbe3445ae2499341e560ec05d0a5752e5820b472a5d568525280688f7
SHA512

138eb87665f95bb02da101f304beb6280838d16f146dce86f1c094ab8dd274fa56c34e723d2873d994d66f230bb85b9411268e4169e5f63a0f95ee1854b812dd
SSDEEP

6144:WnJd4Ihpjy9amEItlfqat18mFKb47vyYNO9:wJBtypEIt9qabz4MFNS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d57a71e4bc02a29d279877438c3bf9ab_JaffaCakes118

Files

d57a71e4bc02a29d279877438c3bf9ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

EnumWndSearch
MainWndProc

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wtq
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE