3fd6a8f3d7ecbcfe13a4423fe8b956fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fd6a8f3d7ecbcfe13a4423fe8b956fb_JaffaCakes118
Size

17KB
MD5

3fd6a8f3d7ecbcfe13a4423fe8b956fb
SHA1

0e0f24d45af5f51d0000c54c1f4393d46e765246
SHA256

e61a227a92aafd4f319415f02dfd9945cbaa2f878f31973f88b66e88674b572e
SHA512

bfa279371affa930639988fedbacc2f320f73b20c5bd488f7e9b04345e4c1cda4d7bd911dbc02dc466db8e8c30e4c327b90d53da0736a840ccdfc630554a687f
SSDEEP

384:7zZkm5vJlEk1Vm/5FwWVUBzbmJ21766uLtPmN:7zmGvw3/5fVUBKwe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fd6a8f3d7ecbcfe13a4423fe8b956fb_JaffaCakes118

Files

3fd6a8f3d7ecbcfe13a4423fe8b956fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15e22082ba2a2b3e8f06c27ccac5c70b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
HeapAlloc
InterlockedExchange
GetProcessHeap
VirtualAlloc
GetLastError

shell32

PathResolve

Sections

.textbss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: 512B - Virtual size: 363B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE