0ae5d3d3173524ebcfce601b90348388_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ae5d3d3173524ebcfce601b90348388_JaffaCakes118
Size

30KB
MD5

0ae5d3d3173524ebcfce601b90348388
SHA1

171fe41cf6f7e0323d2aa558111b13d5af5e4226
SHA256

df7c8f49f1375a83e0410fdd6353dede4073763e807ff09974c1006d831bdd8a
SHA512

8326aad2faead6e76ae0b54613b77d061db2830007bf4ada56d0a180893deb15a2a6859e69806bededa2f43fc918a2bfe548f2ac613135d635bda5348aaaf20b
SSDEEP

768:1FxeETaZ98qSOaPe9ujn7rWTvShkd57cjK9Xx2h:hr2PhSOa2sD7rWbb9cWhx2h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ae5d3d3173524ebcfce601b90348388_JaffaCakes118

Files

0ae5d3d3173524ebcfce601b90348388_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c9d1ce422131a1ba6a69425bf50b886c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetVersion
Sleep

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 256B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE