3e2b161587e31c22602b3f6d6ae5d588_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e2b161587e31c22602b3f6d6ae5d588_JaffaCakes118
Size

297KB
MD5

3e2b161587e31c22602b3f6d6ae5d588
SHA1

4f655a282c6d3d48ba09cce8ed0ce9313d214613
SHA256

9bf5f8d030b4771a1d8da447b5ad28ea62ea7ebb18da3ef2aaf0d6625f786d90
SHA512

406da06e04d93b55d100e7f2182a86569b02f05c49e88e811aea3ab96cda679e144eb2fd6cdc69672e545e97327be5aad2369713bc6a04a7c5d16b95de2473e4
SSDEEP

6144:C844JZF341YRYfhFbzYiiKo7gG4kEvJWUim2OYXj5DZXi9cD4VC8:Cb4JZFoaYfhFbzbip7mkEvJ5im2nXj/i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e2b161587e31c22602b3f6d6ae5d588_JaffaCakes118

Files

3e2b161587e31c22602b3f6d6ae5d588_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22423eb3058af0ae47f08ce450d03f43

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

Sections

.text
Size: 291KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6OTRRfw0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ