3ac86ec917625adc9783457a26579588_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ac86ec917625adc9783457a26579588_JaffaCakes118
Size

39KB
MD5

3ac86ec917625adc9783457a26579588
SHA1

0380bd21f934a7209b7b5fdef8bc640f6b85fe07
SHA256

ebcc6fa1a51837fd57ac3d065d7c9659ddf1a9f288694afd1e0b2a50f87e70a1
SHA512

73da257c6b2058f80f6d2a3ffc713799ac587eef5f45bca2afca007c7905ae08e858ea831782d428ddd04046010c2a102f95ddbecabc4d964ba07d27cfc16f0a
SSDEEP

768:vQLQUc/aG8o8KjFoj19TCv1KyhBqTfvv/wpvrsKx8QxlZbt1A:vcvc/X8VbuXqTfXmIKx8QVb7A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ac86ec917625adc9783457a26579588_JaffaCakes118

Files

3ac86ec917625adc9783457a26579588_JaffaCakes118
.exe windows:5 windows x86 arch:x86

850385993259362d302546d825b4987d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ExitProcess
GetTapeStatus
CloseHandle
ReadFile
SetFilePointer
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
HeapFree
GetProcessHeap
HeapAlloc
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingA
GetProcAddress
LoadLibraryA

user32

RegisterClassA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ