3dcafb067310c8b9e1a6d837023e11c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dcafb067310c8b9e1a6d837023e11c7_JaffaCakes118
Size

95KB
MD5

3dcafb067310c8b9e1a6d837023e11c7
SHA1

c99cc108f4c83ca9f23ccc0f8673dc2f47f5975b
SHA256

9f8af916c1cc01d03af6343bde5b71ee4a405c5d9cea8927643b504f773bd0e5
SHA512

0e26a17051b1d357d007b4e78b1795d4515375136aeb964426e3b4eab17c6eb3948b23ae19e808125185baff3f92b659fb296b2decbc42775cc586a14e1c8ae8
SSDEEP

1536:vwCvsNN1mZ39JigPXKf56VTPmvKfICL4ojSzW37CNTgPZ+4vfadRInwLCbO:vwCv41mZNJigPXm56dmvICziaTgBt3nE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dcafb067310c8b9e1a6d837023e11c7_JaffaCakes118

Files

3dcafb067310c8b9e1a6d837023e11c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ