f3f41f06a843271eabac839b613de0cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3f41f06a843271eabac839b613de0cf_JaffaCakes118
Size

270KB
MD5

f3f41f06a843271eabac839b613de0cf
SHA1

d7c1b5d2d99dd5129ea08115dfd3f14555fda77b
SHA256

8eac092dd776b61be9989c53df7c1b55c014def57504aca24caa6cf15e3312c7
SHA512

15d0df6e128d9fa66b6424c7d75a859565bc0f504f675d1d4370c5bd8e3b40a1538748048fe1213341c85b1ff3f4e5b493258ce2f50314c5d4a380e0cb2336cf
SSDEEP

6144:MFoNw16PgYwjjbwTQA1joyB0hSgz5CKVGP4+kApb3bo80:MFoFF0WQA1r3ILY4S53bb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3f41f06a843271eabac839b613de0cf_JaffaCakes118

Files

f3f41f06a843271eabac839b613de0cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b71d8c1931cb0a297806c1529ed52c6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 266KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ