3b75aca02c9e7f6b79c1ae24085762c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b75aca02c9e7f6b79c1ae24085762c6_JaffaCakes118
Size

11KB
MD5

3b75aca02c9e7f6b79c1ae24085762c6
SHA1

d0b1363d9c255b920ec9fc82270e6192df1f6164
SHA256

9a5de2d52d0c6f3de8a98970d56d24ba1eb2e29d2785c7f747d8950823ffb2d8
SHA512

bad60382df319145ce7a125fe72ddb92a0472c37c3f590668c6e899a1a7bc2f019d94056baa49534089137929597ae1bb9a3bebae61c01039ef8aadb3b682b11
SSDEEP

192:2UvswIn5fl3A+rIyqsfQ4qGYXnHH2C4t7L:2usfl3JE/sfzqv3hM7L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b75aca02c9e7f6b79c1ae24085762c6_JaffaCakes118

Files

3b75aca02c9e7f6b79c1ae24085762c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

97f953b7aedf15df0ac9e5711a654da3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CloseHandle
FlushFileBuffers
WriteFile
CreateFileA
GetTempPathA
HeapFree
GetProcAddress
HeapAlloc
GetProcessHeap

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 438B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ