3e7d75826bb5138339d34fc88b5ed7c8_JaffaCakes118 | Triage

Sharing

General

Target

3e7d75826bb5138339d34fc88b5ed7c8_JaffaCakes118
Size

12KB
MD5

3e7d75826bb5138339d34fc88b5ed7c8
SHA1

36ea591412253c1a078b0011cb3d88fad278b7b3
SHA256

562a4697ef031b5b41c0e91b331f486a1d1ccb11a6430b143c18b0e11a6ddec9
SHA512

673a43f876a9ca25bbdff055c71409cbdb7352e0330e8b2702050ec9efb40cdc9d0b8d4322745e30145844d05be8e2d962dc01275d594bc87affbc22a3324a62
SSDEEP

192:qJBSn/4afZqJTBhS2KL9mKRtRfVI/ilCft8qxSr+4jvGtH59EDy:qJsn/4sQXk2KQKRvV/qe+6vGfr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e7d75826bb5138339d34fc88b5ed7c8_JaffaCakes118

Files

3e7d75826bb5138339d34fc88b5ed7c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

219ff6274b700581af1c16e303a1eac6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
FindClose
FindFirstFileA
GetSystemDirectoryA
SetFileTime
GetFileTime
WinExec
DeleteFileA
GetModuleFileNameA
GetWindowsDirectoryA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ