3ec39019897eb04d3744325b450b14ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ec39019897eb04d3744325b450b14ba_JaffaCakes118
Size

32KB
MD5

3ec39019897eb04d3744325b450b14ba
SHA1

977bf12fbafe28ad6a2ed70251f36bd6b00eb8bf
SHA256

362f3d40a63090bce5b32808dcc25d66bdb25ec43400604deb6f77e8e54f0018
SHA512

ff7550bcce3fc4857bcf695e1c3cf4dd2b2f0e5d095a59702232c26af1e2cdf26724afdcd1a1b883589a6107425711654c112399a8bdeb32469ac0d0d4be4da8
SSDEEP

768:uUh7TzTBziifTeiZSVWihwEknh0L7OTLeNfQff:9Z/nEkh8OTKNI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ec39019897eb04d3744325b450b14ba_JaffaCakes118

Files

3ec39019897eb04d3744325b450b14ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.ASPack
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ASPack
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ASPack
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE