3b8f132878b9b22fc47548cd4959ab5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b8f132878b9b22fc47548cd4959ab5b_JaffaCakes118
Size

80KB
MD5

3b8f132878b9b22fc47548cd4959ab5b
SHA1

e0c6639da398b745035af321ea612669cb98b665
SHA256

8be1825c4da3bb6bfbedf7f8e67ebb9e5074b3660acc755509d488a8fa816f61
SHA512

a1eec59a86346116d8d4b5934544f4c9c5a8144603f6a87ff6194ff4615c89fb2e3592a27d804478ab7a0f9b2c08d4566fd61a3b1dfd2185e51abc99cf8cf3f9
SSDEEP

1536:sGduxMMdjbpIP1pYygI9TlEgglCS47G1xdIoEvO8iMDo2MKg:ruxMyjbGP1bDBpG1xdIoEiMDoj9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b8f132878b9b22fc47548cd4959ab5b_JaffaCakes118

Files

3b8f132878b9b22fc47548cd4959ab5b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bce4f3ff9e3b26a5333cab4f1a1d2ec2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
Sleep
SetFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
LoadResource
SizeofResource
WriteFile
lstrlenA
DeleteFileA
lstrcpyA
lstrcatA
CloseHandle
GetFileTime
HeapAlloc
ReadFile
SetFilePointer
GetSystemDirectoryA
ExitProcess
GetProcessHeap
GetProcAddress
CreateFileA
GetModuleFileNameA
LoadLibraryA

user32

wsprintfA

shell32

SHFileOperationA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ