3ef9c4b4f2dc79fbd744cf78b1e1eeea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ef9c4b4f2dc79fbd744cf78b1e1eeea_JaffaCakes118
Size

357KB
MD5

3ef9c4b4f2dc79fbd744cf78b1e1eeea
SHA1

701d4cf954e3b4b9c668e36d2261c5543f2fdd8b
SHA256

5bfdf3789b0cc5487a31192ece9415984a2562be92b2cbc6fbfa1871881da255
SHA512

20851b287b7732da08faf20a64f298b46f2c461bc23bd08e63cbdd32027f80713b0a7058ea359515dad39a6db76ed107c46e1370fabdef04c44670af10dc5150
SSDEEP

6144:t/6v3WpfkRHsd83RLT68CJPcF3EU5zWdsoU3M71j7jVSP0sLszcJrZR+ezhbEPkM:tyvmpsRM63RXu613MZvMP0u4cPRpw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ef9c4b4f2dc79fbd744cf78b1e1eeea_JaffaCakes118

Files

3ef9c4b4f2dc79fbd744cf78b1e1eeea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 342KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1989
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE