b3b9d2fb0b7064dd95f84cd5b952f1c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3b9d2fb0b7064dd95f84cd5b952f1c5_JaffaCakes118
Size

340KB
MD5

b3b9d2fb0b7064dd95f84cd5b952f1c5
SHA1

6d147e559d170838c2a6e30357e70c1d6c53fd0a
SHA256

203bf1787c2dae56f01171093d8496ad9579a6126280e5a6ba525b23b948da7c
SHA512

c8bd701b3d0561ca88833b02a716337ac80364dbe6695936aef70d2a448e3949027632bfe169c1f03922b85119c1ca6e21bd63426f894164d32ab5a893080c83
SSDEEP

6144:qJ5De2EHd6DKG2bMnlx/8D12nPgkr4n7FJa81jF9K2nPDuDDJG44EJhKCvWn5u1v:cIwDqMnlm2ncj1vVPSPpJBWn0lb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3b9d2fb0b7064dd95f84cd5b952f1c5_JaffaCakes118

Files

b3b9d2fb0b7064dd95f84cd5b952f1c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 242KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DAStub
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE