03e646b5e5a8e37e0b4c9db4436cfbd6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03e646b5e5a8e37e0b4c9db4436cfbd6_JaffaCakes118
Size

175KB
MD5

03e646b5e5a8e37e0b4c9db4436cfbd6
SHA1

363adf673a19299a3a9f64173331218caec385e9
SHA256

d56cd5a6cf6c61b9095d65bd76e797a72342b2864daae903cde03dda5d47ca9c
SHA512

de780a7a2a7669a51770fdbc018c4c731743eaba7c4d6b7ca203a913eb0524c5e29b1f584318e8dbcdb0b1258668e22e204e26e4d6d644fcc2cea575ad3e5b47
SSDEEP

3072:vVe1BQr4JtcTcMdlP9wz29rP0t7Rpx/uFW2eWKpzUwIlBQgIh:voT04j3siz29rPWtLBWKpzGlBB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03e646b5e5a8e37e0b4c9db4436cfbd6_JaffaCakes118

Files

03e646b5e5a8e37e0b4c9db4436cfbd6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a51e9816cfc990ceb97fc1e45f4338c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrChrIA

kernel32

GetTickCount

Exports

Exports

��ectorARM@@00GPAUHINSTANCE__@@U_COMMPROP@@��?SectorGEO@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?SectorGEO@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?SectorHall@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?SectorRade@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?SectorZero@@00GPAUHINSTANCE__@@U_COMMPROP@@;F

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ