3284d58e23b1fa6ef8ef7ea619dba853_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3284d58e23b1fa6ef8ef7ea619dba853_JaffaCakes118
Size

71KB
MD5

3284d58e23b1fa6ef8ef7ea619dba853
SHA1

e4063a9b89f58af58b11243a219c52392fc6e092
SHA256

3b0c383a95c5469264e8bb965c42e10e52f335b8ddaabe86fd90276ef0433863
SHA512

40d2138ce95b1a621fde50c910f9b89c26fa9945d884814dcacc81b04f648280c4bf2169e3eae0c4f1379a5597178fc5c326a25ebb2e6e0836e4f6c2a380aeb9
SSDEEP

1536:4Oqnnkty7aGEW9s4mBKz2yyK8S2gc7CafM:4lk0aGZakR23C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3284d58e23b1fa6ef8ef7ea619dba853_JaffaCakes118

Files

3284d58e23b1fa6ef8ef7ea619dba853_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ece4244d99562cb79bc532d4d2408a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
VirtualAllocEx

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
fclose
fopen
fread
fseek
ftell
malloc
memset
signal

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 100B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.extra
Size: 64KB - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE