3ec917dfe1e90c9d79f79f32bb810ab5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ec917dfe1e90c9d79f79f32bb810ab5_JaffaCakes118
Size

510KB
MD5

3ec917dfe1e90c9d79f79f32bb810ab5
SHA1

63d6cb8c50cd3a5d1b2a23e8516165953edc9cce
SHA256

71fbfce1a18bede0e7a1c3a12a1654d202715f239f26d4ecb419915e7962f7ad
SHA512

1152e62542bc34ec6a51838f05ebc81331a5a4de192b1ba12310d02c888e72d2d589ddcbf92881f60738a551ea57ebae4510b816b7b0b079e347a962751498ad
SSDEEP

12288:ieCz+8lNRaApzgtgVt4apYonqurCZkuR:iGMzgYt4GYonqurqb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ec917dfe1e90c9d79f79f32bb810ab5_JaffaCakes118

Files

3ec917dfe1e90c9d79f79f32bb810ab5_JaffaCakes118
.dll windows:4 windows x86 arch:x86

3c979da68d1e85ac9fef388cccac362a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

pdb.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
ReplaceFileW
Beep

Exports

Exports

ywsxgewa

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 448KB - Virtual size: 447KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ