3dcbe0d5e09691705749a3402a31303f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dcbe0d5e09691705749a3402a31303f_JaffaCakes118
Size

197KB
MD5

3dcbe0d5e09691705749a3402a31303f
SHA1

e7607977b7be4f8971fddd4a4cc839ec547e883f
SHA256

2651d9e8b2898e0ec7c7cceec3ed46f098c95c1860fbe7be1c1eb4a94a5857d3
SHA512

a25239f3eee377beb403565cfe5f6734af115423b50bd2335c7d05b94412436cf870d57f6216e93a61e34aff133946401ae68fecaa04f7c5cefdad556110bf01
SSDEEP

3072:kQ7pWdHCS+lwr3D1LeAOGGuL2+MSpFRo+QE98JwGlEdUcKGvL6:kYWdHCSX1LWGGuC3SpX98GGlEdGGD6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dcbe0d5e09691705749a3402a31303f_JaffaCakes118

Files

3dcbe0d5e09691705749a3402a31303f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1706d2a56f4c1061417ec650039950c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA
SHGetSpecialFolderPathA

kernel32

CloseHandle
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
LockResource
LoadResource
GetModuleHandleA
FindResourceA
ExitProcess
CreateFileA

Sections

.text
Size: 1024B - Virtual size: 602B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE