3d4272eab6d7d368acd013eba3b9b6b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d4272eab6d7d368acd013eba3b9b6b3_JaffaCakes118
Size

216KB
MD5

3d4272eab6d7d368acd013eba3b9b6b3
SHA1

8d1e9414ca1852364bacb288deb87afc73385545
SHA256

ea423cb64824d14bf70cd033deaba9f1f970d702c8ca7864b1a178f0098c1615
SHA512

b26850ff8c10df5de6b68ff238c7955b134e90b133294dc47f9c73916363be86cbcda4f3ee66a43ebcccba9f48a40f24c7feb0b91c1b6d541050c105dc9902e2
SSDEEP

6144:1ouKpWDZ1elRL4drvLfx2234KcwTjnlfGIQkfcbLqfU:10p0ez8dfp9b1Tjnl7QkfXf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d4272eab6d7d368acd013eba3b9b6b3_JaffaCakes118

Files

3d4272eab6d7d368acd013eba3b9b6b3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Selling\Buying\Seeking.tfr

Exports

Exports

InsertExpressionExW@16
CallMutant@4
ShowObjectExA@16
InvalidateFullName@16
RemovePointW@12
SetFileA@16
OnListA@8
InsertComponentA@12
FormatWindowInfoExW@8
SetMutexA@4

Sections

.qhma
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.iJwkuN
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lYNrd
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WrEjh
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NFX
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zoZn
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lvuFa
Size: - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ