0143553b4bf106431699abd20f1b84b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0143553b4bf106431699abd20f1b84b7_JaffaCakes118
Size

72KB
MD5

0143553b4bf106431699abd20f1b84b7
SHA1

cf70f9722a1343c34724c2cf367464d4cdd39823
SHA256

ed1274a051d169f075c554dbb3d591dc6b882d58c2f1a7fe7f1f6faa25f2f26e
SHA512

97bff1cfc7d665b48e397893b6c12bfd94feb404a895b7fa29181ee118126c168fe3d64a2ff766bd921cd937182e6b3a751106e343510f6f86fb394ff4427201
SSDEEP

1536:DSvrAOertySyyZwaalyBBBCFtdarMtp4BX2fTJdsWJ:+vrirtayZ4qEJFJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0143553b4bf106431699abd20f1b84b7_JaffaCakes118

Files

0143553b4bf106431699abd20f1b84b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8563c2dfb1b24ead0db70405b61cdd43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ord517
ord518
ord665
ord666
ord593
ord594
ord598
ord520
ord709
ord631
ord525
ord526
ord528
ord529
ord670
ord711
ord712
ord606
ord607
ord716
ord717
ord537
ord644
ord570
ord648
ord573
ord576
ord685
ord100
ord689
ord616
ord618
ord580

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ