0f62aa6ca05a5ed3be1e337c748f6cef_JaffaCakes118 | Triage

Sharing

General

Target

0f62aa6ca05a5ed3be1e337c748f6cef_JaffaCakes118
Size

179KB
MD5

0f62aa6ca05a5ed3be1e337c748f6cef
SHA1

560ba0eb0e3c43cb5d41bb51b1af62f113b24a3e
SHA256

d78bb5d50715ba252ff580e5b1825ab4b8a4e63136af4e4b0566d0686d1fa156
SHA512

0eedb5b83c2291c4004be749f350864f0b52fd7f92c32d16630a821282cca7ba665109e5eb3e2883d64ef14b0e4e12e0f954dde8d3ee9674977f77d8cc453ca0
SSDEEP

3072:w55JsHQ9S/gGEyar2I2Xy7OBI0beJ9NStJcwasu5eHTeHPN+zJ0RGr:waQ9S/JEhFwaBKtJnJtzJ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f62aa6ca05a5ed3be1e337c748f6cef_JaffaCakes118

Files

0f62aa6ca05a5ed3be1e337c748f6cef_JaffaCakes118
.exe windows:5 windows x86 arch:x86

62395f1c6dea147c8c75d7f982a6fe57

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharLowerW

kernel32

GetTickCount

Exports

Exports

��ianideForm@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?FullCtrlOption@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?FullString@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?MomentErase@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?StringFull@@00GPAUHINSTANCE__@@U_COMMPROP@@;F

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 379B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ