3d2016350b048c3163cf6487bce2dc03_JaffaCakes118 | Triage

Sharing

General

Target

3d2016350b048c3163cf6487bce2dc03_JaffaCakes118
Size

82KB
MD5

3d2016350b048c3163cf6487bce2dc03
SHA1

d3b2567eeddc1a8d21e76f486940a66a730b21d7
SHA256

cf245610dc9fccb7e5896f563be6cb8ee2ae5f6000163d29eb18e6afe5eee05d
SHA512

ee4bc048a9c1b26dfefa139725a1b6b013ba6e69320a1e764dae804f4ce5a15a2a1c0e030c3a9cb9a30b0976c537a843bd7b25eee78038850c89c4de0aae78db
SSDEEP

1536:GhPlI555Kattx2XS+BD3fpDJULyi0FN2aUb:Gh9I55wa/gvD3R+YN2Hb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d2016350b048c3163cf6487bce2dc03_JaffaCakes118

Files

3d2016350b048c3163cf6487bce2dc03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

66e66a2350cec598cc4f5a41be6f1b5e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ms.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
GetDiskFreeSpaceA
GetNumberFormatA

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ