b3d287b29007290ee3f708f60657b4f4_JaffaCakes118 | Triage

Sharing

General

Target

b3d287b29007290ee3f708f60657b4f4_JaffaCakes118
Size

298KB
MD5

b3d287b29007290ee3f708f60657b4f4
SHA1

1f7e162302dd4b6e55c1a74c56cc2b4949a31d9d
SHA256

2e0bf6ab3fb4ca3956be737a314932cce6bec38e636f537017418dd2fd439415
SHA512

7cdd185f374fe0931764065e16645630710d4902cb6e7b2f8074325f711644e1c0430cc579b8d70cb38073caaf15b14a93ad7b58c934448681eb18297807220d
SSDEEP

3072:F8pe7ZPXVgomWqLEnCYvcvIXRTy1hmUI0xlOcwPIvS3oGcFuG9hFoHk148GzMw/f:wAXVNvDx8hzNxl8PIvSiFxTO8GzM2f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3d287b29007290ee3f708f60657b4f4_JaffaCakes118

Files

b3d287b29007290ee3f708f60657b4f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c401b959f744f1e1cb48e5faacfced2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
CreateFileA
GetModuleHandleW
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ