3e3a8a9d6e882313f7371c9002586924_JaffaCakes118 | Triage

Sharing

General

Target

3e3a8a9d6e882313f7371c9002586924_JaffaCakes118
Size

623KB
MD5

3e3a8a9d6e882313f7371c9002586924
SHA1

8637da07a8426ecbaa355f0f4d46322fa2aff19e
SHA256

c22f7d426cc092834cb66bc0b7f9e01bd7f7866fcfb4c803213be313931b9242
SHA512

e43767b66a6f17d2782bf341ebb117e33ad0efeae972ad0cac17d66bacfbca7bfcaa0c746784b9a490d52cd4427f2b778dde64c615f6f727ad1a794628d2e696
SSDEEP

12288:i75/xvNZOjBMHfv28Yr9oaL+nSSm7f0pvb6gjQHOX/m0ZDQHnVv:iVxCjBMH7YamT0pvbTj6OvmKQF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e3a8a9d6e882313f7371c9002586924_JaffaCakes118

Files

3e3a8a9d6e882313f7371c9002586924_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 586KB - Virtual size: 586KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ