3c94ee098037b888f88c7ea65b9c5ed1_JaffaCakes118 | Triage

Sharing

General

Target

3c94ee098037b888f88c7ea65b9c5ed1_JaffaCakes118
Size

110KB
MD5

3c94ee098037b888f88c7ea65b9c5ed1
SHA1

0bac3faa29a4ff5e4296d580eada161b8a4d32bf
SHA256

d7b17290ba970623904bf700ba778968c1484a7facc423f91dd6fc791c6a7f61
SHA512

b8e6dcbbee6529fb4e698381f876f239ea4063f8f00ad9897f84c320e2cb057c58fff0751ebea2463ae63ce59fd2c793ee1b3e489aec6cdabdf36eb9e895e0e3
SSDEEP

1536:6R7lzRRGRsScPctAoqZL3Ve++4LCEh8V/chaohOJQZoUzdaywYV8:6RNfGROWA1A+/L60CJQZoKMyp8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c94ee098037b888f88c7ea65b9c5ed1_JaffaCakes118

Files

3c94ee098037b888f88c7ea65b9c5ed1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9bf8d187981c9aae532665113e749ffd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
VirtualAlloc
lstrcatA
FileTimeToDosDateTime
GetWindowsDirectoryA

user32

LoadIconA
LoadCursorA

gdi32

GetStockObject

advapi32

RegOpenKeyExA

Sections

.2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.3
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ