397449aee7835d190fd6e052e8c8d0a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

397449aee7835d190fd6e052e8c8d0a0_JaffaCakes118
Size

166KB
MD5

397449aee7835d190fd6e052e8c8d0a0
SHA1

84e47cc333deaaf0e3b8f2b85a9533365d53f046
SHA256

b4592bc9fb2599d175850408c89233219f93a0cb2f89edf1429afc891b851f40
SHA512

b4f7b0384a419201712c9280d2aa18407f246c602a9603dcd5d4c3543ba6ea476c9e986201da8bac8305358d33b254c6e25185ed94bf1bfb9e0d6c70c07d848e
SSDEEP

3072:gzxLE9PVtpgidEZayaU19iLjYnR+2s42SLGT59wxbzgNINI53:w49PVzgoyaU19Aac2s7+swxbzYINI53

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
397449aee7835d190fd6e052e8c8d0a0_JaffaCakes118

Files

397449aee7835d190fd6e052e8c8d0a0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\altleeosmoJukugigxumez\DoleabNormForbnugironeaparc~\NixeifbeWareheRumproneaparc~\ehyencooloyaweveopfoheaparc~.pdb

Exports

Exports

IsValidFolderEx@8

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dee
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adecu
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.psikif
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ