f526348d63436c1f649d617ff0d055c3_JaffaCakes118 | Triage

Sharing

General

Target

f526348d63436c1f649d617ff0d055c3_JaffaCakes118
Size

127KB
MD5

f526348d63436c1f649d617ff0d055c3
SHA1

91e1c7733928dbf135ab32e84e2c61a7586652b7
SHA256

a4467dccb32edd2ba60b49b7fce1753d3ee1bdbe0164b3529a3bd04a6d2c325d
SHA512

7664aa0ba931e0dceda34765803bd7569646e303208f1ed56875871831269aaa6acf56f335fe92297cb2e06b79391427b52e92684dbe2f59042469978462b016
SSDEEP

3072:9ZXgU7xP3EaedXKP1VMOjdAeL4QMLqQkkZ:9ZN/r1VtqnhBZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f526348d63436c1f649d617ff0d055c3_JaffaCakes118

Files

f526348d63436c1f649d617ff0d055c3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8bfa185704d7596299b5109bf35120d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharAlphaNumericA
IsCharAlphaA
GetDC

kernel32

GetProcessHeap

Exports

Exports

?FounderNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalLock@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalPointer@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalSpeed@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalWeight@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalXern@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityCover@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityQuan@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?ReactNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 1024B - Virtual size: 623B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ