3fbba001dcdbd04b13d3605b5753abd4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fbba001dcdbd04b13d3605b5753abd4_JaffaCakes118
Size

253KB
MD5

3fbba001dcdbd04b13d3605b5753abd4
SHA1

82960fec8ed85eb5ad677b4c6d9ef97aaec08876
SHA256

a26dc1c34da238079d51ca90a5a0a07701a44e534d5e80a2212b0e552df9b579
SHA512

5d0b9527fcdbcbb2fc995374fe27d621b955cb838570fecb80b1c514890f17a62067dc985841efc28aeb97adeb5ca0f3fe38b990a4f002435097a03a419dbe09
SSDEEP

6144:pIBMSRKonxMt0kYMDwVZ10pW1uVXaBCiahMVGTc5:7QYYI2eKEhCGTc5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fbba001dcdbd04b13d3605b5753abd4_JaffaCakes118

Files

3fbba001dcdbd04b13d3605b5753abd4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541b27a206b8db01f0ed492f975825ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

DefWindowProcA

Sections

.MPRESS1
Size: 204KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE