3dcfa0329c44f44928edf5f74f104cf9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dcfa0329c44f44928edf5f74f104cf9_JaffaCakes118
Size

137KB
MD5

3dcfa0329c44f44928edf5f74f104cf9
SHA1

e8631ece868aec29701fa4bb85b37e8c1a9b7a84
SHA256

e00f174e2b2ad59f96da453a26695d2cdb95ea8b51fd85ed8dbd526ae20e4750
SHA512

d2550bcc6cbd1d4cb4adca883aa46f5ae4da28fd4077c5d12ed239e40a5a27ce5215dc20033ce545ee24c1b0977f826ee8af3b9a977f33dffc4f99cff8000ba4
SSDEEP

3072:UVC6SDxN9osIGMmvhw8PrBVxhQOPUp19wJ2W7iBd5:UhE9QGFw8PjLxPA9wJ2W+P5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dcfa0329c44f44928edf5f74f104cf9_JaffaCakes118

Files

3dcfa0329c44f44928edf5f74f104cf9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

.text
Size: 90KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.teraphy
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE