3f1506d06bbcf08b7c87137e7b4f4ca1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f1506d06bbcf08b7c87137e7b4f4ca1_JaffaCakes118
Size

57KB
MD5

3f1506d06bbcf08b7c87137e7b4f4ca1
SHA1

cd9cd51d1313506e9310b3e747242f0f79eb2b16
SHA256

343ed8c7dbddc66528a7422a79ea4dec38a056191a1c2885aa9c334280868652
SHA512

6a0abb751616773390d9af7235b9cf04f7199afff39310c4c62960baf14dfc180d21ad1654c43d18213a4cac4fdd90ba7bbc4d8ce41983b7a192f2a48c0bb4df
SSDEEP

768:nWdSNNr00g7KnPBRYxjUthS/6GkNJqWTqSruod5BqeqrLPaHVAL4Vi/rDIuRIhT6:ntTpJnPEjGsiHNVTqSrA060+tNT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f1506d06bbcf08b7c87137e7b4f4ca1_JaffaCakes118

Files

3f1506d06bbcf08b7c87137e7b4f4ca1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef2505f1662baa875e6b7d1b9426fd5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
DialogBoxParamA

kernel32

GetModuleHandleW
GlobalFree
GlobalAlloc
ExitProcess
GetModuleHandleA
GetProcAddress

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE