3d37b96032f08692fc35b2a3910015be_JaffaCakes118 | Triage

Sharing

General

Target

3d37b96032f08692fc35b2a3910015be_JaffaCakes118
Size

122KB
MD5

3d37b96032f08692fc35b2a3910015be
SHA1

3f51c0a630944cefb3a6a3284ab83f6d6fa08394
SHA256

46730a9b7ee062d241bb25ed7b8255042381fb3aec419523827f7c00d15a1bbc
SHA512

1a802412d33652492d282bbdc0a5b08640a5c7c4432997f88ee13dddb96368141e9953f7eca2b112cb2c177db670d16f542d66d5c62608b6627a72e613ad83d9
SSDEEP

3072:g1E5K/rtzQ3sRf2o7xkf0acqctI40ARceFE3pc0mCs7mKeot:g1v/rNF5x/an4XRbFqwJ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d37b96032f08692fc35b2a3910015be_JaffaCakes118

Files

3d37b96032f08692fc35b2a3910015be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

953c971d017c7c4de8f452b68ee34dfc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
VirtualAlloc
LoadLibraryA

user32

DispatchMessageA
TranslateMessage
GetMessageA

oleaut32

VarRound

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ