3c8cbb5876bd3356189e5ff37e3ce113_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c8cbb5876bd3356189e5ff37e3ce113_JaffaCakes118
Size

103KB
MD5

3c8cbb5876bd3356189e5ff37e3ce113
SHA1

3cd06a92a25fd88ef3e3ee89fd339c6c98e4b85f
SHA256

9e075b648d9aa819a7dad548ef1e64f0a9df388af3aca972850752df8cfd4635
SHA512

361a1c0d0e3d8595743ac46bce8f154505623b456628904b5f9ea67885a77acd54a4ea1098cc84f6b010316464276105b1c9637562c434327711c5909f3eada1
SSDEEP

3072:kvE8HhDdhr5Ol/8eryLg53iTUgZ/SKHp569ud4FaBlxROtHrpUQ4:kv1dVkl/8nUgZTrd4kBlutHVUQ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c8cbb5876bd3356189e5ff37e3ce113_JaffaCakes118

Files

3c8cbb5876bd3356189e5ff37e3ce113_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

k3el2f3k
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uwe2wxcv
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

d544wg.3
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6h4y1vqg
Size: 99KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

eydai690
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ