3ce8ee995e666dd4f28cb8c898e5b7c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ce8ee995e666dd4f28cb8c898e5b7c4_JaffaCakes118
Size

253KB
MD5

3ce8ee995e666dd4f28cb8c898e5b7c4
SHA1

327f7f5b0a468d3d4b9b9eadffca3442af90ac8b
SHA256

24ee0a9638c4b7c069c8169475185f948570dc8345369498527276ff981bcf3e
SHA512

5d2364cefb35981edc2a02d098d16733ee66439f4845651b67bbc5c4e532423122dcd49d0b77e856a2bc4bd59ffa0a97c8ed504351bbf7b580ef1ebe2a37bd0d
SSDEEP

6144:sr87qfqzKpuvvv/XkgkwXKHZm1wTCkUkVDxzq42i:h7qfqzcKfX9KHQeTP37zg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ce8ee995e666dd4f28cb8c898e5b7c4_JaffaCakes118

Files

3ce8ee995e666dd4f28cb8c898e5b7c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.ErCaN
Size: 248KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ErCaN
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ErCaN
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ