3ce9b9836ca764ad4592676c955cfb91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ce9b9836ca764ad4592676c955cfb91_JaffaCakes118
Size

81KB
MD5

3ce9b9836ca764ad4592676c955cfb91
SHA1

c210e9eb599c5dc06d607697101d60a1d1b82bff
SHA256

d8ec1c3f0663d420d7bf4aa5bff170f972917e87774aa2591b1a07b2e4ebbff7
SHA512

9521ca258cb518223cc77d074967328bd3fccd3fd515a298df7321416b22a78a92957e9550a1d110c85131ffa5bff00d7a78dd191289357a83fb8126d529c6bd
SSDEEP

1536:cOzNeOFK0ndJPNMdPUYxXoutkAaeEJjxg7SBj0nls20mRuYW:cUeOFhndVNr74aDLj0lluYW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ce9b9836ca764ad4592676c955cfb91_JaffaCakes118

Files

3ce9b9836ca764ad4592676c955cfb91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0fbb594cd87601cd1a19e2328843c65e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
OpenFile
VirtualProtect

shell32

ShellAboutA
StrRChrIW
SHGetMalloc

Sections

.text
Size: 45KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ