3f5881140c13324c09a6cf26a6b3ced7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f5881140c13324c09a6cf26a6b3ced7_JaffaCakes118
Size

23KB
MD5

3f5881140c13324c09a6cf26a6b3ced7
SHA1

1818b568cfadc3eecad28f14a4bce03c4c56e733
SHA256

519906d66dbcb71bdc679bf51519f2cb9001d82f59c5d8116ec07470334e1d65
SHA512

392748c0de0f71f5bd66bb0bd420faf59752432b2a0b96a16491ddc41f40909552080364dedfe14d6fbbaba91ff24ff0fcf354e1bdea775741f3866dad903e6b
SSDEEP

384:UTjEGNNsPeNNnkHz4c7j7GHtvpyyt1vO3rt88HnaTaBksCG2HJFn8OFQL:U8asPkAz/zCptt1v6SanaeEpv87

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f5881140c13324c09a6cf26a6b3ced7_JaffaCakes118

Files

3f5881140c13324c09a6cf26a6b3ced7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee4a85a24a78b96f1f446cb4f1944dde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
CloseHandle
WriteFile
CreateFileA
GetTempPathA
GetTickCount
SetLastError
GetProcAddress

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ