3d39785c48f18654ec49e1f646268317_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d39785c48f18654ec49e1f646268317_JaffaCakes118
Size

78KB
MD5

3d39785c48f18654ec49e1f646268317
SHA1

36e788d9d991468a60b09f044502878501078679
SHA256

2b880d970c99e61a04dfd81cfeb0026fde262d7f87186d5996017ddf7c8bf056
SHA512

addf30d27113125680db95dd9b26aaf630951441bc700ad5a11d2202f34447d728987cbf5db70f2f28181d57f71817ad122a0499a7920b570dc63d90ca18d1da
SSDEEP

1536:ep0fDaKC0LX/+0tcjfQiT7ssaTMuvsbs20mRuYW+9kcmyX:SKmKCIXGa6oicrg1luYW+FDX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d39785c48f18654ec49e1f646268317_JaffaCakes118

Files

3d39785c48f18654ec49e1f646268317_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7914544362d09cf9b2aa6025715d897b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragAcceptFiles
StrRChrIA
CheckEscapesW

kernel32

CancelWaitableTimer
DefineDosDeviceW
VirtualProtect

Sections

.text
Size: 42KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ