b3a4c2a4e71034428f74b9ac8fa9945e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3a4c2a4e71034428f74b9ac8fa9945e_JaffaCakes118
Size

288KB
MD5

b3a4c2a4e71034428f74b9ac8fa9945e
SHA1

0005299f9ee23c8e9f6316c06832e8e011769851
SHA256

09b4d66d738c07058f11f914b8c7ba0874f68b19990c3c48b8526c8435d401aa
SHA512

710ab5eb2111ce0fdf9dbc8b9809ed072cd9d8727b2510304182d9a69601926715e9fb9610c50e9688c870c0432de301f512a221c1061b32be36559ed82d0f5c
SSDEEP

6144:LyTwzr0DaOw8iSZPOsF3X5QikiqyJ3fWh3Gy:B0Da/GZ2sRXORIlfW8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3a4c2a4e71034428f74b9ac8fa9945e_JaffaCakes118

Files

b3a4c2a4e71034428f74b9ac8fa9945e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3cb97784fef09f1273a4865b17814da7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetFileType
ExitProcess
LoadLibraryA
GetFileSize
GetProcAddress

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 237KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ