3ba387b7d6d09eef84f0dd8c7939cdae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ba387b7d6d09eef84f0dd8c7939cdae_JaffaCakes118
Size

81KB
MD5

3ba387b7d6d09eef84f0dd8c7939cdae
SHA1

8a8ab37934116c1cf9e5b539e02661a8471e3592
SHA256

45004dbb1f85cc2f137737f41df16ef6849967c7633144231bc86a685f636cbb
SHA512

989f21006991209b260cb6bc951c5482576807c88e47b2f22aac71f0c4eb8615d6038a25c00413380bb0ebb97efd1d51c57c5d1f70d521a09e5212d65b1598e1
SSDEEP

1536:E3Bhn8Tuj/4F3522ukAEh5N8wPPq7PNgs20mRuYWwoc:E3B18yj/4r22fN8QPqDNgluYW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ba387b7d6d09eef84f0dd8c7939cdae_JaffaCakes118

Files

3ba387b7d6d09eef84f0dd8c7939cdae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df03cdcd31346a5133a1319d89165224

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFile
TerminateThread
VirtualProtect

shlwapi

IsCharSpaceW
ChrCmpIW
StrCatW

Sections

.text
Size: 45KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ