08ef750da52ecf3dc9f0232e03df998b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08ef750da52ecf3dc9f0232e03df998b_JaffaCakes118
Size

214KB
MD5

08ef750da52ecf3dc9f0232e03df998b
SHA1

4eedfcb60e02527fa58413fabfd2954a7471a447
SHA256

519652f6a7ffffff2c39875a6ef005843c6a015a1bf036eaf17077c352a76cc4
SHA512

e3ab63d25f2698324542fcc0aa8c14f99f53e23602cbfc6c240d05e8e0205338ebf9fce8c1d1e05837892fa2c3e180a9cc7ac56dbbc6247bb991e0baea44cfaa
SSDEEP

6144:QqyaYZJl9qO/5gut0II1KLDqx2u7TqfUZ:sZ5qO/5gG0IIg3lu7ef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08ef750da52ecf3dc9f0232e03df998b_JaffaCakes118

Files

08ef750da52ecf3dc9f0232e03df998b_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Selling\Buying\Seeking.tfr

Exports

Exports

KillModuleA@8
InvalidateObject@8
GetAppName@12
OnEventW@16
GenerateProjectOriginal@12
CrtScreenEx@12
GenerateWindowExA@12
RemoveModuleExW@4
IsDataOriginal@12
OnAppNameA@8

Sections

.qhma
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.iJwkuN
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lYNrd
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WrEjh
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NFX
Size: 1024B - Virtual size: 753B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zoZn
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lvuFa
Size: - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ