3ff71847aeedd76edeaa256fb33acd4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ff71847aeedd76edeaa256fb33acd4c_JaffaCakes118
Size

328KB
MD5

3ff71847aeedd76edeaa256fb33acd4c
SHA1

0b8aae015f9b5bac17085c4bdc4e52666c8241b5
SHA256

719e7fc763f9f379cd9774cd02c2ef829d382cc161cf8fbeeb02989dde5c019c
SHA512

37e1a71fbae67c826f871ba71dbae24e44649f7d201a91c036facda92fe353a6097236de0e334492a72f209ffde295c614456f407122b777974da0076c2a01f5
SSDEEP

6144:uIWbEGsxdTGzTb1P6LG/J9hS14sCIFQwaEyUNxYrYBei6Cu0Ys:uISEGsx68LG/J9h1sQuxYrQUCT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ff71847aeedd76edeaa256fb33acd4c_JaffaCakes118

Files

3ff71847aeedd76edeaa256fb33acd4c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8ffc31bccd11f7f873be952d93bdc291

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegOpenKeyExW

oleaut32

SysAllocStringLen

mscoree

CorBindToRuntimeEx

Sections

.text
Size: 227KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE