3e13d3fbf6dc0c5c97f14fe53d4463bf_JaffaCakes118 | Triage

Sharing

General

Target

3e13d3fbf6dc0c5c97f14fe53d4463bf_JaffaCakes118
Size

59KB
MD5

3e13d3fbf6dc0c5c97f14fe53d4463bf
SHA1

81843b2a60470bff0c32500be2aea02136b5064a
SHA256

5937fdd57fab1f55001f14fabf07a191fa27ae810e6f424d217d0406f7a9eb85
SHA512

e480010b1a1c3e62816ccf80ec8275bfcaf3c15c07777270f6f5daf58becbf8eb0c42e717a3a209efcb6ee6153a0b585499c49a0e9e626bcb4948770066edadd
SSDEEP

768:kaC6li1i+60tbRU6ghWvsz+fa4Zxeuck0m3j+JF1Quwc:FCsi1i+PAjE6+faU+hCjKXkc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e13d3fbf6dc0c5c97f14fe53d4463bf_JaffaCakes118

Files

3e13d3fbf6dc0c5c97f14fe53d4463bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d94fb513c96f65fff108d70da05a497

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
Sleep
FindFirstFileA
OpenFile

user32

DrawTextW
DialogBoxParamA
CopyImage

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ