3a091a46c333e44d7d57b54eae470aee_JaffaCakes118 | Triage

Sharing

General

Target

3a091a46c333e44d7d57b54eae470aee_JaffaCakes118
Size

280KB
MD5

3a091a46c333e44d7d57b54eae470aee
SHA1

60bc23772b8e8874747147217a26db72488b33c7
SHA256

79f97eb5a3142749c9d1a70b922e8059e9f818fcf119056a6da152ff19b658b4
SHA512

7a7535a209255dde3d4e9d22efbfbd6c414fd65b4a77b1fef39f5acfcd399d021618ce941699d46845036b27afddf5940a6f60749bcfe747a7f9aad9a679782e
SSDEEP

6144:05vCfooGLJfq8y/fy4HqgomFuwT0WoLPfn2bLge5A79SHsxX6:05vCffGLJfUH1/Mw6rfKge69SHCq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a091a46c333e44d7d57b54eae470aee_JaffaCakes118

Files

3a091a46c333e44d7d57b54eae470aee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

262a92b4d122c9558423d0a9e08dc634

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

memcpy
memcmp

kernel32

CreateFileA
CreateDirectoryA
CreateFileMappingA
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
GetProcAddress
LoadLibraryA
GetEnvironmentVariableA
GetMailslotInfo
GetFileSize
GetConsoleMode
FreeLibrary
DeleteFileA

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 228KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ