3a8bfd24eb6f24fbbc02f52c278fe270_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a8bfd24eb6f24fbbc02f52c278fe270_JaffaCakes118
Size

171KB
MD5

3a8bfd24eb6f24fbbc02f52c278fe270
SHA1

f6348809e9b1ecaefad17ffa0715fa9266644a80
SHA256

83665f294245acd6e35318b5182fe79666dd4c8bafbdd05f2d97e5163d851dd1
SHA512

a5f49d0e72a19522958d4cf0237188b20a22aae1315e665c6e10009c8efb5338af5dc002dd37d985e84bfec43b37a8dbd7c96cba4cdb91541ab58a4c73c9db8f
SSDEEP

3072:3hhmxpdKUN5YAIxglK+EU3tEqKR+aH5yw/3dSM5tlw1UYZxb2bK:3hhurh5YxaKFY6qgj/NS0lGqb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a8bfd24eb6f24fbbc02f52c278fe270_JaffaCakes118

Files

3a8bfd24eb6f24fbbc02f52c278fe270_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4d467bc5fce5ceaf2932746917fcb874

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Windows Dir\FileExec

Imports

user32

GetPropA

kernel32

LocalSize
FindFirstFileW
FindResourceExW
LoadResource
GetVersionExW
SetFileAttributesA
FindFirstFileA
OpenEventW
CancelIo
OpenFileMappingA
GetCommandLineW
GetBinaryTypeA
CloseHandle
GetProfileStringW
ClearCommError

Exports

Exports

_PeekMessagePeekMessageA@0

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ