3517717b4eed9a37dfd479109a4dc638_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3517717b4eed9a37dfd479109a4dc638_JaffaCakes118
Size

1.5MB
MD5

3517717b4eed9a37dfd479109a4dc638
SHA1

c0bb3d76b6096c074439a18d552ac5403a8d9143
SHA256

4f222dcd721bd083a56d98e09970c641d01fcc78a3b00d419ca82031f80511af
SHA512

0c753d5b906027336a65aca5e8d778b2449c232ba385b5f1dba5c147f5028f60767a4a45c489c2c0c07580955ddf3a9c28b8c21911f99b42a6e0dc80dd7e3c9b
SSDEEP

24576:AkgsDF33flr0Nzh/dlSYTj74mctR2SdjglZgRMGdG8W3zG39RNERA96Eqme/8E/w:AUuiJ9/De+pM6xrtUowQrsiweGuA5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3517717b4eed9a37dfd479109a4dc638_JaffaCakes118

Files

3517717b4eed9a37dfd479109a4dc638_JaffaCakes118
.exe windows:5 windows x86 arch:x86

33c2816a38fdfeef945b118d732b46d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
FindResourceA
LoadResource
WriteFile
SizeofResource
VirtualProtect
CloseHandle
GetTempPathA
UnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter

shell32

ShellExecuteA

msvcr90

_except_handler4_common
_crt_debugger_hook

Sections

.text
Size: 1024B - Virtual size: 1018B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ