b3e2beb5cc3ffb8c7f7f5ac1e7ade7a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3e2beb5cc3ffb8c7f7f5ac1e7ade7a7_JaffaCakes118
Size

72KB
MD5

b3e2beb5cc3ffb8c7f7f5ac1e7ade7a7
SHA1

35abe340e933c13738c4974bb47010a1829dc32a
SHA256

4c65b234c6cf2286c6ee4cd827cef7ccf0c6e653802d1dee5401816411bdc537
SHA512

40ec11ea0bb8df2ab56917cfddb46104b323f8e9a97a9d1956cc5e546ccdca9f172d7a76da0746e15c81911fe31a5a4fde8e3f12223f5a99dd9451a704efff84
SSDEEP

1536:SRMkdKavpK1qNH7xqjLtVnPVDSpM81xY96zRpYtZIQVe:QKav6+bYzP5Sf1xY9EYv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3e2beb5cc3ffb8c7f7f5ac1e7ade7a7_JaffaCakes118

Files

b3e2beb5cc3ffb8c7f7f5ac1e7ade7a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0fd61df8e33a8fe0c8f63126c738b8c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateProcessA
ExitProcess
GetProcessHeap
GetTickCount
GetWindowsDirectoryA
HeapAlloc
HeapFree
Sleep
WriteFile
lstrcatA

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 402B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE