308e5610c15f31b5d89a35bf43162b31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

308e5610c15f31b5d89a35bf43162b31_JaffaCakes118
Size

192KB
MD5

308e5610c15f31b5d89a35bf43162b31
SHA1

8d2c5bcfe9956f0fc01bf5bae3891b91e914a5fc
SHA256

558b26f63b5ab6ceccbba789115a381d9a38a47a0f7cd40e9b67a2eae37d1680
SHA512

195b1d2b957eccd91c54a92476267745113b2dcdea15a9b51e5f1e7349540bf0fccdb47fc4ab956ac853d905f80839d081b21eda6f5139dce7a595e9fff70d04
SSDEEP

3072:P5+/NceuqOZqZCkKBmLszqsTVPWjJ8A9zdhnZuyqZjJjDLKpE5GYOm7Jbn:P5+eeu+AmAqyVPWdfi1jDOpKGY7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
308e5610c15f31b5d89a35bf43162b31_JaffaCakes118

Files

308e5610c15f31b5d89a35bf43162b31_JaffaCakes118
.exe windows:5 windows x86 arch:x86

32bcc47105f6463c29f6b19fa136c704

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

VkKeyScanW

shlwapi

PathIsUNCA

kernel32

GetCurrentDirectoryW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rt_ecx
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_eax
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_esp
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_edx
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_ebx
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ