3f0c93f04b3b08918227f75eabb3bc15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f0c93f04b3b08918227f75eabb3bc15_JaffaCakes118
Size

120KB
MD5

3f0c93f04b3b08918227f75eabb3bc15
SHA1

e34d3266f029d9adfc58b06457d8480a29b8ff1e
SHA256

df2725d38070ac3d9097b85b605ecd2b2d975a6dac71bbc551ddede08434f6ef
SHA512

631c55fb5c739921067800cfc645f9930ffa4888f040f4233926d7b8f254a3db4bf211405a3e6e94b73e94eefa9f70544b18adf9968cf849ac62b0d5cd8ca477
SSDEEP

1536:oJf2HxzkPbCm3e8AnyhbPGeVtbEmrA3cEPJ1rj+BB8Rcag42J8+rPBX5WCRd:s2qAnyhbOMIkA3cEPJ1nca8O+bZd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f0c93f04b3b08918227f75eabb3bc15_JaffaCakes118

Files

3f0c93f04b3b08918227f75eabb3bc15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 393B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ