3ac5c1f886679c09fd621d8f4382e141_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ac5c1f886679c09fd621d8f4382e141_JaffaCakes118
Size

216KB
MD5

3ac5c1f886679c09fd621d8f4382e141
SHA1

7bdb4015c28e2d62f76575bef7bd3b4c04630000
SHA256

d7787a905e42478aceffb9dff1e937b10100c9b803c4dad57d2471cf7c159a9b
SHA512

3caed844f5462f27f9b5fc54fd63559cb1c7fad6b78749b45b326f47fd20dda6faac3bd9dbe65add926c264165c1627947c547614cf127ec78c692797472bd9e
SSDEEP

6144:Y1GxxRSmmhexpDZi0gbUo2mgtLSPwMpVIBQ:Y6PSjefDYPbUPs4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ac5c1f886679c09fd621d8f4382e141_JaffaCakes118

Files

3ac5c1f886679c09fd621d8f4382e141_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c49d68c0f4ffc859a0730f9d64be5ed6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
CreateFileA
lstrcatA
GetWindowsDirectoryA
LoadLibraryW
GetModuleHandleW

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.455
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ