1289d9ae17cbe97080cb5ab55549e515_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1289d9ae17cbe97080cb5ab55549e515_JaffaCakes118
Size

180KB
MD5

1289d9ae17cbe97080cb5ab55549e515
SHA1

76bb89f01d4360e4818318afa49fbcd05a477dc7
SHA256

db7bbaab140309c15b61551f92fdf9f4dcc4a744bf9ec9a3b3837a891ac443ad
SHA512

7b46f153f8159427ad4f9366f2108235fefb9a7aed017755cac4ef1695746830d165fc0f8046b95429babf62f3f8683ce9149443388ff5a6bbcd98131bb8f730
SSDEEP

3072:jMaNTrTNrrAinYVMS99YlabCIXE5LTf6q423TJpqFCgmCIStm5F+ZKa06XYeX:jBZpXAii9Ylas5ns21pqmKtOFANXb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1289d9ae17cbe97080cb5ab55549e515_JaffaCakes118

Files

1289d9ae17cbe97080cb5ab55549e515_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

SetDateExW@8
AddMessageOriginal@16
MonitorA@4

Sections

.text
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.alre
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.laor
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oiMini
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE