f3e3d69cf0d16627793127d2aae4e685_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3e3d69cf0d16627793127d2aae4e685_JaffaCakes118
Size

84KB
MD5

f3e3d69cf0d16627793127d2aae4e685
SHA1

11d22334ccf91060209b509489558209b69374fa
SHA256

3dea0a5800b08d8117be44a6a1c454e969ede5c1c8ff3a9bc33726be94ece547
SHA512

f59e6b97523844863788cc09be11b84859c69c690ed20fa11cc42e3a7a88c94263a8e06ae5b4eea1126e5d298e58ccffe7f4a636c7605f302317de1ac8a3cc49
SSDEEP

1536:LAgPvIFKMAMDmitpfzrS+89Y2hzDJ1wHB6TdVVwPl06DMUSENFCg:8wv8RxvLz+hhp1NJnw3VSiFCg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3e3d69cf0d16627793127d2aae4e685_JaffaCakes118

Files

f3e3d69cf0d16627793127d2aae4e685_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c126a1a0ef1f828b3315f48a37ca0af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
_acmdln
__p__commode
fprintf
_except_handler3
__setusermatherr
fclose
_strnicmp
exit
free
fwrite
_XcptFilter
_adjust_fdiv
cos
realloc
malloc
fopen
_iob
_initterm
abort
_exit
strcmp
__getmainargs

kernel32

GetStartupInfoA
GetModuleHandleW
VirtualProtect

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ