373ba7502b8370100a8267b26f98440d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

373ba7502b8370100a8267b26f98440d_JaffaCakes118
Size

172KB
MD5

373ba7502b8370100a8267b26f98440d
SHA1

6e034529c26b3e1f70d68245a390e80c9c8ac7bd
SHA256

c73555110271107077644318b1b59fc938efa172cf3003b679d49bc27bc0c608
SHA512

7cc57184be8eb3b2f519ab2f8ca7ee0fa71c205e536bcdbaac8179740ba69be6883fa84e36eb7b35cb9aebf8cadc4d17f83c658a251d89c0ba5ef1fdaf4e5487
SSDEEP

3072:N3y1SH3GFR9eAGY5cpRLeOfJac5u2ziERpz2fTSZ93pYVndzja60:N3y1SH3e9d5creOYUOEKuZ9ezjj0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
373ba7502b8370100a8267b26f98440d_JaffaCakes118

Files

373ba7502b8370100a8267b26f98440d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b61f33c03f2b232971a9377535b5cf52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharAlphaA
IsCharUpperW

kernel32

GetTickCount

Exports

Exports

?ImageInformationLongEsn@@YG_KPAUHBITMAP__@@PAU_PSP@@@Z

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.temp
Size: 512B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ