d3b0db9962a4497957248815e09c95c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3b0db9962a4497957248815e09c95c6_JaffaCakes118
Size

1.4MB
MD5

d3b0db9962a4497957248815e09c95c6
SHA1

f6174abbba107cad488f08e0a23f68567c0fb418
SHA256

518aa91c0fd75108c1e0572f16aba1e8722d4cd5543280c263a9e34a092a4fb0
SHA512

80fecfb14dcb262a9b93af09c5e7a1302ed352c0903893f3544e7737e2ae570d7f4fdeda1f146d9e87fab5a9f07ff55833e52da0a72010166decb6b792a56f85
SSDEEP

24576:uYq0SGI9Q+vGRiR7yH54H4UiyJ//7yYiqnZrl6BJ6O:uYvqy+uQ7yH54YTyV7tJnJl6BJ6O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3b0db9962a4497957248815e09c95c6_JaffaCakes118

Files

d3b0db9962a4497957248815e09c95c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d05fb31809428dfa6ee0a27d9c9ff8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
CreateHardLinkA
GetLastError
GetShortPathNameA
GetProcAddress
ExpandEnvironmentStringsA
LoadLibraryA

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

.itext
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE