3781433b99cdafd8ca7e4b93f8ca16f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3781433b99cdafd8ca7e4b93f8ca16f1_JaffaCakes118
Size

14KB
MD5

3781433b99cdafd8ca7e4b93f8ca16f1
SHA1

a3131f5602730644b9ddc492dc3a58f426d9a731
SHA256

f2a8cfef0fe84baaaefe611bafe970875091286aaa62dd7d4ecccc899c4a35e6
SHA512

243a436c1746742042387be1cc88363d041bbbcb1423f77e5ab688247fc96bf1c6d29a6379763106ba82f75869ab58ce63676370ccc7718264c22121111dea40
SSDEEP

384:hlgn1I4uPAr6KB2AJYg/MCT0pjWXDc5Lfw:3gni4SSJ1ECwpjeQd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3781433b99cdafd8ca7e4b93f8ca16f1_JaffaCakes118

Files

3781433b99cdafd8ca7e4b93f8ca16f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 9KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE