3839c4b855b64215f1c76feb1329125e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3839c4b855b64215f1c76feb1329125e_JaffaCakes118
Size

146KB
MD5

3839c4b855b64215f1c76feb1329125e
SHA1

dcee36834920deaa6aa12082f849637f24711179
SHA256

c4eb3900158f87a37ef125ddbdb47064707115a5b914510ebb444b4242bcda81
SHA512

453d2ab190e9b958cdaba8a42deeef76b5f51082fd68526bcfb71ce28a54dfb5f9ff27e38f08b2383e3bb7c96173c1f9a07e304e0d211cf40a2d3cc60301cb17
SSDEEP

3072:cUs+2Q9A1qGRw3G6z0j4fCxLmWJWM+qD4HOFAqorP1kmE8wGI15Hw7iOoHaELUE:Vs+RCF6z0jM8WM+q0HIAdrP68wGI1hwi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3839c4b855b64215f1c76feb1329125e_JaffaCakes118

Files

3839c4b855b64215f1c76feb1329125e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18b22e4b91fd7d64f9dfc4e391edfd96

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW

Sections

.text
Size: 512B - Virtual size: 338B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE