3ddee02ddeacfe2c10ae42cdf7a85744_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ddee02ddeacfe2c10ae42cdf7a85744_JaffaCakes118
Size

112KB
MD5

3ddee02ddeacfe2c10ae42cdf7a85744
SHA1

6b66e682af44c2760e8433ebe06bdf3b3e23da07
SHA256

770372b45d8cf1bc1b257ff6a7e012c787ef990cf4ffe8593b9e0b6dcbb2dc25
SHA512

4d5571985002850a266427d2d83407c99197c901c7eaf86513b51d25e2d84b81266db6e908c95edff6cdecd0dc17692b10edff7a8efadc37a52cb4dbd34f5a49
SSDEEP

1536:2Wh4/Rk21ZvEndSJzfoG8XvkHB+zUTPmHXxjnANHhtXQp4YSA:2kQRkk5E8z8XvkHB+oT+3xLYEp4YS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ddee02ddeacfe2c10ae42cdf7a85744_JaffaCakes118

Files

3ddee02ddeacfe2c10ae42cdf7a85744_JaffaCakes118
.exe windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ