3f13559d29a855c1d51024c6b9be5de9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f13559d29a855c1d51024c6b9be5de9_JaffaCakes118
Size

538KB
MD5

3f13559d29a855c1d51024c6b9be5de9
SHA1

2ecaeecfed06af85f9c70b69af2110b2ec3d4df7
SHA256

6ca51ab6d15a8fcc4028eef7cdc13574c31fb191af291279986517ded7fe7a14
SHA512

5eaa95e7845ec39f8cb0ac83202d3d3e69805bc3c386223aca71232f5dd71f3c82344945397020ae551efa50352e04a403df3eca7bfa68843103db23aa8ed9ec
SSDEEP

12288:gnV0jchGKvYUhplWbC04IhTcRdzYffrSY:Oemv3cVZczMrf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f13559d29a855c1d51024c6b9be5de9_JaffaCakes118

Files

3f13559d29a855c1d51024c6b9be5de9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

12cb72fbf3308a9787db139482b7d132

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetVersionExA
LoadLibraryA
GetProcAddress
ExitProcess

Sections

.text
Size: 80KB - Virtual size: 133KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 25KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 402KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE