135cd7ce0209aa74af914f5986738165_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

135cd7ce0209aa74af914f5986738165_JaffaCakes118
Size

182KB
MD5

135cd7ce0209aa74af914f5986738165
SHA1

ebd0231dc56a6362317f1f84017a6ad2dc886a9f
SHA256

25b149db33fc7b8a1d623628a10268092c476a9be440e2474ee3b165aa81e36e
SHA512

4086b7d764138c4fc4d25582ae6ea803c4bbf3bdc457696c51d1b15dc018343dd23f0f6783d41c0c16ce02842fbd7822e695c46b2d5e07147e1d095cd03dc215
SSDEEP

3072:5D/1zIvIbRkttK7/XSpTiixW7X+S8XJnokk/JmWIqRA7M9JwcP2XLjWdxcih88k+:5D/1zue3mpTiiANEZEDph88k+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
135cd7ce0209aa74af914f5986738165_JaffaCakes118

Files

135cd7ce0209aa74af914f5986738165_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Kill\Took\Sell\Buy.exe

Exports

Exports

_SwitchToThisWindow_New@4

Sections

.epjhn
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.jhhgj
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oiuhg
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mknjg
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reetki
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fdsff
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ