3f1a4a32c6d077155bb5a4d2c2340c42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f1a4a32c6d077155bb5a4d2c2340c42_JaffaCakes118
Size

11KB
MD5

3f1a4a32c6d077155bb5a4d2c2340c42
SHA1

4f0ae812438196023aaaf0d302c038558f8ff4d2
SHA256

41e872f080a389a4945d6f131cecf0bde4ce10cd285fe9eb4d61bcdcae293a06
SHA512

b0b72ff4eefb457a6b29b107efcedb2a13a98b24fb74c301e331f26a157474dd941ea3b30c0a9931e4e4996fa87cf1439991c8e5f84324c2bd75e5ba8ad1c8f5
SSDEEP

192:X6cmf67zW7HYm8W2QHs9ZO552Q2MRs7BBazQCFIX/F46hbtnVxbh:X6cmf67zW74m85QQQ2MECbAHVj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f1a4a32c6d077155bb5a4d2c2340c42_JaffaCakes118

Files

3f1a4a32c6d077155bb5a4d2c2340c42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca285fd696f41fd689fcc30f49a4c098

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetTempPathA
LoadResource
LockResource
SizeofResource
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ