3e4cd69c862051c936e7ca8b7f0c45df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e4cd69c862051c936e7ca8b7f0c45df_JaffaCakes118
Size

438KB
MD5

3e4cd69c862051c936e7ca8b7f0c45df
SHA1

0f53cfff1db8a96887a46fcd354df8977db4f76b
SHA256

1ac5b35481b59e6c9d188004e3e08b24a56bdabe389fc3242cf054814f81d614
SHA512

ec0b3dd3d6584a47e805c48ad66401dd1f4861a0f14d8d8bb56559811a479b5b3067378b41511d3f1b4b23fba2da17828ac70d073ceda654f7b358d0b7903e10
SSDEEP

6144:6D2ZDxwrUZj72Uqx3nUyIJtbHeDkIp1bZ3bS5Lr8ZNIB6oWUNNQhL:YPUZsxEVbHeDkI1bZ3S2X7UghL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e4cd69c862051c936e7ca8b7f0c45df_JaffaCakes118

Files

3e4cd69c862051c936e7ca8b7f0c45df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nom1z14i
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

3wl31tpg
Size: 260KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2.dlyvwc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ