3e6fc6cd75e748cd680ad3fa34ff36bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e6fc6cd75e748cd680ad3fa34ff36bc_JaffaCakes118
Size

298KB
MD5

3e6fc6cd75e748cd680ad3fa34ff36bc
SHA1

e7e09c1e8dfa86f73505c85a857d62914aadeade
SHA256

68a5cd008ddf25ed79eb473e38e839a4af80e468cb18b6417c0acdcbec8564e8
SHA512

6534d5b197892572ed10731486b99e6fc4f9059adf6c2559883fbe1b2f5c5496889c7da47f4789de9f54dc0d7bf9a9212829598e8667c194a2ab7d6fef659f4d
SSDEEP

3072:Q+pe7BPXMomWqLEnCYvcvIXRTy1hmUI0xlOcw4oIvS3oGcFuG9hFoHk148GzMwKl:5EXhvDx8hzNxl84oIvSiFxTO8GzMp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e6fc6cd75e748cd680ad3fa34ff36bc_JaffaCakes118

Files

3e6fc6cd75e748cd680ad3fa34ff36bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03b7edfe7371cd842d19e16ff77e0eb3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
CreateFileA
LoadLibraryW
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ