3ddd679988f5d29445dd0b9f36f47ee3_JaffaCakes118 | Triage

Sharing

General

Target

3ddd679988f5d29445dd0b9f36f47ee3_JaffaCakes118
Size

364KB
MD5

3ddd679988f5d29445dd0b9f36f47ee3
SHA1

247f773b89934b006e10a9be51b826b4c92adb28
SHA256

3a5428722f9fca8ecc507d6382a3fdadd77b6a99ff3811ea2c7a401674d34912
SHA512

7ded939e3655616f0d532f0a18181142cf6d0075a83bef7a9b69fe956c3c441e1b57eace93710cfa794ee7c9c2931b40eb4f39fd965931c83f08f1a845f2a3ef
SSDEEP

6144:j8UDBY+1Hm4mVhk2uiynS1L4hhDc24haVO0H/2uAG/XpL1IF:j869eVhDuPS+hhDzUaZ2QWF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ddd679988f5d29445dd0b9f36f47ee3_JaffaCakes118

Files

3ddd679988f5d29445dd0b9f36f47ee3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2717a120f3532759192746b08a75beea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
CreateFileA
WriteFile
GetEnvironmentVariableW

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 288KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE