3f4142d656b93138474bd49a844e03d8_JaffaCakes118 | Triage

Sharing

General

Target

3f4142d656b93138474bd49a844e03d8_JaffaCakes118
Size

132KB
MD5

3f4142d656b93138474bd49a844e03d8
SHA1

c7b9452a0a6f7dee89a0bd6c6bbeaf5131f02b26
SHA256

b3f66e6e68a8f4607d6edb034d664d922f0ee39c234e01e4cfa2e7f514719df6
SHA512

acaa671cd7e133cf2306dd338ded42558439715b5004fad1d146438c02a6bc95388ee5346242eb2d617e0766b76b5304298fe1e3134ee7d30755fcc15436bd17
SSDEEP

3072:iSdB1rm22pc00jEF/b9YJQUsY0Vo4ExBV4Hw:i41i2srSIUsPV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f4142d656b93138474bd49a844e03d8_JaffaCakes118

Files

3f4142d656b93138474bd49a844e03d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE