0dd8e3a77f93b2a49d29f2ecf3375c10_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0dd8e3a77f93b2a49d29f2ecf3375c10_JaffaCakes118
Size

233KB
MD5

0dd8e3a77f93b2a49d29f2ecf3375c10
SHA1

b02a2e649b3258eaa5fb533a3e77e48f4332c94d
SHA256

8653ff8db2b8a7c487717e8ff6ab002d532e28f86595f3f2cf4ccb21a06ea963
SHA512

f9b4a0f306b532d9a5bcd160b0606a3353326e8e08cbfa1d94f07203d19b62e2ed17309388597bc1f8a7165dc79852db2e2c55f863ac81a9216e2abe83dfdb9e
SSDEEP

6144:YK1MRfZfU44uscds5o59YJ5QkmDTEZkjYU0Vrv0:YK1efZd4usc8o59GtZk0Jv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dd8e3a77f93b2a49d29f2ecf3375c10_JaffaCakes118

Files

0dd8e3a77f93b2a49d29f2ecf3375c10_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Imamme\Cete mum\Eely syn\f.pdb

Exports

Exports

AbbeAgesSnap
AposObeyGarsmoraLambMarlfearcrownan
Bindharlsukyo
BletTyreKyesEnolmullwanla
Bubsacedkoisthinsnogtorma
ByesrayaBullClot
DiptheldShawyowlgeltDavyPompJustPhotMoosVerbGradAlms
DorrSkimLeftays
EcruBathCrocalifSkepLintPeriLassswabDifflap
FetsmakoZillMaltpeakgeedKoasmojoTuisWynsaffpa
GhisOradbikedrewfazepaysFakeDribNebsskuaEmesRiskGruedah
Jiltizarpometedun
JudoGuvsStatby
Kipsjotspetka
Knotbeares
KnurKohlpye
KotoCurbuveaZeksgape
LehrBodeSpazdozyDawsErrsrakupokewritStewpi
LoanHuesdelsRaspAlgaAbetHillspaecawswhooi
MidsokraNeonJiltviewgybeHwanshullotiTapsMattSlotti
MoxaUndyMossBasesumplevoflakBiasBevyVagiTuckChidSnipTapacolka
NomeclanKayoWandfeear
PunaOsarPierLarsReppforaChapYurtKanayarnhad
RantMinkyeahaltsdamsmileow
RimeCurtPumaAidskaneajeeSnedeauxwabet
SagylurkgirdTethProwRunecoffrebsfelttophSprySikaDumanog
SumsHoesOyerDuckyum
SwapcapowindDawkho
SwatAnsaAlsoDuelsidePigshowkAjarTurkWonkkyakFeedasksFatefistami
TweeLuvsti
UndedodoSakijamel
VeinViolGumsGawpfagsgobyFireah

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.retrf
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_MEM_READ

.int
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_MEM_READ

.ihnt
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_MEM_READ

.tre
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_MEM_READ

.rerte
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_MEM_READ

.dsf
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

PDB Paths

Exports

Exports

Sections

.text Size: 73KB - Virtual size: 73KB

.rdata Size: 26KB - Virtual size: 26KB

.retrf Size: 18KB - Virtual size: 17KB

.int Size: 16KB - Virtual size: 15KB

.ihnt Size: 25KB - Virtual size: 25KB

.tre Size: 18KB - Virtual size: 18KB

.rerte Size: 23KB - Virtual size: 22KB

.dsf Size: 18KB - Virtual size: 17KB

.reloc Size: 5KB - Virtual size: 5KB

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 73KB - Virtual size: 73KB

.rdata
Size: 26KB - Virtual size: 26KB

.retrf
Size: 18KB - Virtual size: 17KB

.int
Size: 16KB - Virtual size: 15KB

.ihnt
Size: 25KB - Virtual size: 25KB

.tre
Size: 18KB - Virtual size: 18KB

.rerte
Size: 23KB - Virtual size: 22KB

.dsf
Size: 18KB - Virtual size: 17KB

.reloc
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 7KB - Virtual size: 7KB