093e1791a4ceb306238afde62a51d702_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

093e1791a4ceb306238afde62a51d702_JaffaCakes118
Size

111KB
MD5

093e1791a4ceb306238afde62a51d702
SHA1

40d3fecf72272f23b991ab4b17925bf0781535cc
SHA256

f65e0e09679f3c94433dba90a3c8e0dfd77a2d7f87144aaa14f8a50c345318d9
SHA512

8f094c863def8cb98c2c65fad99021dd64d8af1ba8edcbdab48849a233522aea59588f7de1d221d32881e14c172323e7681ab7ebfc7de5cb21bb6cd12e002915
SSDEEP

3072:peUUVIF8Dxw+VG0JAIesGCkoYNyymikI2ps:AcFYAtC/YIs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
093e1791a4ceb306238afde62a51d702_JaffaCakes118

Files

093e1791a4ceb306238afde62a51d702_JaffaCakes118
.exe windows:5 windows x86 arch:x86

994ba4eb27d1c1341fbfe2a97db02798

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsContentTypeW

kernel32

GetCurrentDirectoryW

user32

GetDesktopWindow

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

net3e
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

net1e
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

net5e
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

net4e
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

net2e
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ