b3d92b7a7bdc3fea44b5dc3f5bae2a09_JaffaCakes118 | Triage

Sharing

General

Target

b3d92b7a7bdc3fea44b5dc3f5bae2a09_JaffaCakes118
Size

100KB
MD5

b3d92b7a7bdc3fea44b5dc3f5bae2a09
SHA1

649d063ec0f9be05d1732946c7ce0455167120f5
SHA256

4176c48fd08be11948a31d4f6f297b133d71bd9ec509f56b48c86040eaaefa31
SHA512

e0194f796f1b9f214c54cb91f1bfb3bd86e6df14a7f16936be3ea191d8bfa0314fc929bb014337445e3861882893d52ef69ee97450e9bf41b997288f011e1a1a
SSDEEP

1536:p1CQutJa7j0QSbpEh70GHAWeZ/7zAyRpNn/jxOHuDSNjQTZ3fO6:pcz6j0nNIQGHpeJ7X/NrkBE3fO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3d92b7a7bdc3fea44b5dc3f5bae2a09_JaffaCakes118

Files

b3d92b7a7bdc3fea44b5dc3f5bae2a09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d4dc27ff5390962a587b37c156ecbe01

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapAlloc
GetProcessHeap
GetTickCount
GetProfileIntA
GetThreadPriority
GetThreadLocale

rpcrt4

RpcBindingVectorFree
RpcBindingToStringBindingW
RpcStringBindingParseW

Exports

Exports

_GCIVYBV@0

Sections

.text1
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ