00e973ec1f36476287298965276d5989_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00e973ec1f36476287298965276d5989_JaffaCakes118
Size

379KB
MD5

00e973ec1f36476287298965276d5989
SHA1

81e005136a09e125373e83ae1d5c62cd207383f3
SHA256

5571c88abfe63327a963312745c97bf3018957178a49e81a35ffc7b1d9f4725a
SHA512

e8d849246b798c8335b8a7a09d614a8f79ac546f835bbcdffc4532f3408988522208962eb335fe58debd564b0a5d361d19ce5a21ac89d9e8eb2d422bca2b46a1
SSDEEP

6144:AcFYAtC/YIOAFVoVcJkCO/AVl8d94AuQbnDVEYmWZ5Hh9oha24:AcU/dPfYcP8bM0nqYx/Hh6k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00e973ec1f36476287298965276d5989_JaffaCakes118

Files

00e973ec1f36476287298965276d5989_JaffaCakes118
.exe windows:5 windows x86 arch:x86

994ba4eb27d1c1341fbfe2a97db02798

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsContentTypeW

kernel32

GetCurrentDirectoryW

user32

GetDesktopWindow

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

net3e
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

net1e
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

net5e
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

net4e
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

net2e
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ