d3bfb25fc6ac2890ea2d244c4786512d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3bfb25fc6ac2890ea2d244c4786512d_JaffaCakes118
Size

298KB
MD5

d3bfb25fc6ac2890ea2d244c4786512d
SHA1

e5ef938cb9421309729f7ba4fbc291bd7c141936
SHA256

6c4d04040bd811fb6b4004af708406262c5f5ff4fa74e74e4d71e9e7374a9b81
SHA512

659404ffe971d2cdf662a8f6327ca8cc3894d2017999e2de1236734f5b1925c01d2f379e11b11e41dae2a1f8a6398cd524c4eb34fb8579c0e35b32a392db0a0b
SSDEEP

6144:yQQlTdr9OIhR/LnnDy3/JZxkXwTo6rDTd99OW9CMa93KLtNa4Bi:pQLlyQwTo6Dx99f9CB6xMP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3bfb25fc6ac2890ea2d244c4786512d_JaffaCakes118

Files

d3bfb25fc6ac2890ea2d244c4786512d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

2301447bc740bf52cba5aa34b448fd3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime

user32

TranslateMessage

Sections

.text
Size: 281KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ