d3ae974787cd3df37a32a50d6c6ee685_JaffaCakes118 | Triage

Sharing

General

Target

d3ae974787cd3df37a32a50d6c6ee685_JaffaCakes118
Size

411KB
MD5

d3ae974787cd3df37a32a50d6c6ee685
SHA1

392447bc7716ff86ebfe2b2abe98f36439ff093e
SHA256

9ee2e7cde7ca3f435d5f7181bd6bfc87265e0ab6bc37ac4baed7df25592d4cb9
SHA512

5a67e24013c3ea34fe333c696eaefd0d4974e7884093a759b978f8f60f61840e0355e50078e0b091438b3d2f7093b3c96d27c4a34e785058dd46c5d0238ec27f
SSDEEP

6144:PD+CwJPn8zetqMawiAtUTXcH1Iidwp6/amfPcZU+JrGXGkIprW8YgB/H14BcQAX6:xsnBEDiUydGp6HiKIk8Yvxz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3ae974787cd3df37a32a50d6c6ee685_JaffaCakes118

Files

d3ae974787cd3df37a32a50d6c6ee685_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3fb863511ecb4e025ef3c40c2a305caa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvbvm60

ord517

Sections

.text
Size: 406KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0wtNrSb0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ