a3dc1d91bbd3df23f5b5d1ec389715c8_JaffaCakes118 | Triage

Sharing

General

Target

a3dc1d91bbd3df23f5b5d1ec389715c8_JaffaCakes118
Size

44KB
MD5

a3dc1d91bbd3df23f5b5d1ec389715c8
SHA1

132a32367582df921264fb3c53b0e8393d876dcf
SHA256

685d1c602f0b43a3822b9052ddf35934c6b1302ea26b291c811ef383d92ffb42
SHA512

75d80e66922a5536ecfd104c54ec97c0c88a64751cef8af90a361261f5f150f83b427e824514e8d09db100f3c7a9e5440bd44066d199f402a1fb805ec7fca793
SSDEEP

768:bEy/ZhqnSfBEcda1AD8cDeruE1ZeRbmC8qosE:rhjfda1AYcDu9EICWsE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3dc1d91bbd3df23f5b5d1ec389715c8_JaffaCakes118

Files

a3dc1d91bbd3df23f5b5d1ec389715c8_JaffaCakes118
.exe windows:1 windows x86 arch:x86

7c00c8c83ce27ea1de1f41137701e936

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePen

user32

VkKeyScanExA
WinHelpA
wsprintfA
wvsprintfA

kernel32

GetDateFormatA
GetDefaultCommConfigA
GetDiskFreeSpaceExA
GetDriveTypeA
GetEnvironmentVariableA
GetFileAttributesA
GetFullPathNameA
GetLocaleInfoA
GetProcAddress
LoadLibraryA
UnmapViewOfFile
VirtualAlloc
VirtualFree

Sections

.code
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 22B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 598B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ