3273259425b48985b2ce2afb31c9425d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3273259425b48985b2ce2afb31c9425d_JaffaCakes118
Size

208KB
MD5

3273259425b48985b2ce2afb31c9425d
SHA1

f338d9795be0f9f1f4891d7878474a49b685eff1
SHA256

8990dd5a749cfb125c0c927e6ee56c9dfe06f46940e6f4a79e8c34405143f8be
SHA512

4f8f787b9b930e1c83d26850ee4cc5d0cd5d11d86b67e56f8017f5ecfb62ef850bf837d14372ed57a36614f143bb58db31ec07a96c76befa396f04b5fdf89c9f
SSDEEP

3072:dsJTbVitV+wHREJrUgBUw/C9IqW2f+pCPNsT+UEEtFgBOtpVkefOz17U8:OJkgwHREJxBkIqWQuifB4fU1t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3273259425b48985b2ce2afb31c9425d_JaffaCakes118

Files

3273259425b48985b2ce2afb31c9425d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3da7db70825beceac5b42d64da5ffa5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetModuleHandleA
GetStartupInfoA

user32

CopyImage

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ