568e445a1b49494f5a1a9f4a7d1a78d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

568e445a1b49494f5a1a9f4a7d1a78d1_JaffaCakes118
Size

214KB
MD5

568e445a1b49494f5a1a9f4a7d1a78d1
SHA1

3a8f733240afed9d89f30b741982366b684ad56b
SHA256

5151395e3a96094908cea34963640783e82a4c6f2de316d9aec0c43b25e7f55a
SHA512

06ae3e0fbaf906e51872e1cebabe7e7531f62473e71c7c3b4870ee4f31ae042bd29854005eb6c682763004c033f55a3d51456e97ae39e327e211f475e9d7c8db
SSDEEP

6144:yP8ib91TfBz1ElHnza2NdQkfHXUbvqfUiGC:yP821Th2tnhNFHXUefL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
568e445a1b49494f5a1a9f4a7d1a78d1_JaffaCakes118

Files

568e445a1b49494f5a1a9f4a7d1a78d1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Selling\Buying\Seeking.tfr

Exports

Exports

KillModuleA@8
InvalidateObject@8
GetAppName@12
OnEventW@16
GenerateProjectOriginal@12
CrtScreenEx@12
GenerateWindowExA@12
RemoveModuleExW@4
IsDataOriginal@12
OnAppNameA@8

Sections

.qhma
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.iJwkuN
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lYNrd
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WrEjh
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NFX
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zoZn
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lvuFa
Size: - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ