3dd8f54bfee479da040f06fc58aa16f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dd8f54bfee479da040f06fc58aa16f9_JaffaCakes118
Size

61KB
MD5

3dd8f54bfee479da040f06fc58aa16f9
SHA1

181fc4f39eca581c1710e0898bd7f7c82e1ff99a
SHA256

cad5745abb8becfcfd2e10b5217b1e42ecccf2e9d7e0718b9b9b319ee734a262
SHA512

8f9e86afb31b39cab9dffb9d75ef26d516fd2b04aea364a42b422632ac07d34c707e4974472e6d46dc71d19d8b109c2078168e087eca2cfd9b8667d44c074a00
SSDEEP

1536:ufwApHI6eisinV8H0CS3EBsTrq7gXyZxRz9WBS:ufToDisinV8UC+r+TRzIS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dd8f54bfee479da040f06fc58aa16f9_JaffaCakes118

Files

3dd8f54bfee479da040f06fc58aa16f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ