3b3ef4cc543ff98d42810ca302f8fdff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b3ef4cc543ff98d42810ca302f8fdff_JaffaCakes118
Size

333KB
MD5

3b3ef4cc543ff98d42810ca302f8fdff
SHA1

ad65971feb62c8f91c285af5c16b3babc4bf5e88
SHA256

afc77d8e97e8eee0f9dbfbb4d815e4d5de829bfd39f80b562104bc4dadf242ae
SHA512

2c8480ec9beffa010a0c7717a728a76f448d4a903dc257196b7d8624610fcb138e83acd59125c29ac83d1f9e44b31bd98e4fdbbe392b66b5e18e0f6c23912aba
SSDEEP

6144:TTmSE7V78X3SfyNVe/2rP566cjMT+ShYITbEAu8HaEWT:TTcR8X3NNlrh6ljMTrhvvJBHaEY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b3ef4cc543ff98d42810ca302f8fdff_JaffaCakes118

Files

3b3ef4cc543ff98d42810ca302f8fdff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 293KB - Virtual size: 796KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

san
Size: 100B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE