3f486fe72206296b6def61acae71ae8e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f486fe72206296b6def61acae71ae8e_JaffaCakes118
Size

540KB
MD5

3f486fe72206296b6def61acae71ae8e
SHA1

f88eed1a31b8c72295d4a0b9602e14be7d7b4063
SHA256

2a4aae0194f32a7bbd188737aed0ae42e73ed15ce1f46395b3d5dbdeebd60570
SHA512

1126fe1645b1c6e87500a3b0cfc283fbeeb2ebeccb1d2673ab413f7d13841ac4f274ed022dea5f473f40c2c43c439e57ca475dba9b211f55aaa27ea9d9b7e8fb
SSDEEP

12288:UtNarRdlOAh+4r3E7ZQyFtoN/gl6W9+HSBbXJrZMu/atUO:UtgOAPeZ5FtoZSdlZMu63

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f486fe72206296b6def61acae71ae8e_JaffaCakes118

Files

3f486fe72206296b6def61acae71ae8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

laruojhg
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

h9v1iym7
Size: 427KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qwbyc6yq
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ