0a2e9debad7667a1cb8d57be8dace2f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a2e9debad7667a1cb8d57be8dace2f6_JaffaCakes118
Size

170KB
MD5

0a2e9debad7667a1cb8d57be8dace2f6
SHA1

f37cfbab4d30e2f3acf55e280b5e7289506294d2
SHA256

db374cd251b1d2414ace4076ce2c6e7c2da37aeee0803c7266075352a0721d4e
SHA512

2105be8378af2e583919d04f3fc23b585e8c5c8263e4b56ab2ee3fa5585c04e4bebccc2583d2b3d6f9f3405070a322aa2aa089cbe9b80b2ed8e20c843ae89005
SSDEEP

3072:jAlCjpstW5kfCbeU5uHUvBpmKgvQ1Fxawl+vtjulw1UYLy2bK:jAlCuWOqbe1iPmKRFx1+v4lGDb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a2e9debad7667a1cb8d57be8dace2f6_JaffaCakes118

Files

0a2e9debad7667a1cb8d57be8dace2f6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4d467bc5fce5ceaf2932746917fcb874

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Windows Dir\FileExec

Imports

user32

GetPropA

kernel32

LocalSize
FindFirstFileW
FindResourceExW
LoadResource
GetVersionExW
SetFileAttributesA
FindFirstFileA
OpenEventW
CancelIo
OpenFileMappingA
GetCommandLineW
GetBinaryTypeA
CloseHandle
GetProfileStringW
ClearCommError

Exports

Exports

_PeekMessagePeekMessageA@0

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ