0976e72dc7fc274a6a8fcbf7364e86cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0976e72dc7fc274a6a8fcbf7364e86cd_JaffaCakes118
Size

226KB
MD5

0976e72dc7fc274a6a8fcbf7364e86cd
SHA1

a5b88af25e4bc47229500f95034661a975d9fe40
SHA256

bd56064849748cbc2f73cd9b0a7b4bf3a9bcbe129aa6a489c6a8a1b7506b1d7e
SHA512

9c5a27099f15dbcb55d8738129eac54d0dc83add8db32929490bc4264951159f70fb3a472c59b9f1081bc1508c882890d01aa476732d949f737a00d4f756973c
SSDEEP

6144:G/Vvl+Y3p0/F/8JPtQk1fpx9w/gsA/ZUf:3/yf/h/Za

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0976e72dc7fc274a6a8fcbf7364e86cd_JaffaCakes118

Files

0976e72dc7fc274a6a8fcbf7364e86cd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\tawhaohbasomabagofeedcokeSoma\bitononUndoUdonyowusdcokeSoma\batUrnsKolacafeenwusdcokeSoma.pdb

Exports

Exports

GenerateClassExW@16
GenerateProcessOriginal@16
InsertStateOriginal@4

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.psikif
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Tide
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ