3001e2a11206debbd825b9111e422ad8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3001e2a11206debbd825b9111e422ad8_JaffaCakes118
Size

60KB
MD5

3001e2a11206debbd825b9111e422ad8
SHA1

ac1aa0acc02d0aeb91f6725d1e4efbb5f5120c9f
SHA256

bc4e17c3ac6c2ae71b2644132f0efdd9347d1e57f318ce139b8a7ca9549d71a3
SHA512

1bef0454588e048f4cfbcb8b6aff40095e9eea8d254b752a24bca70d181754dd4ecab4d91068a96f6d6d6276303d0d7974af3e1692795b494d8e4d50635d4f53
SSDEEP

768:VmgByKG1uD861JrDvyUZk2RD861JrDvyUZk2:KV1Q86LD6z2586LD6z2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3001e2a11206debbd825b9111e422ad8_JaffaCakes118

Files

3001e2a11206debbd825b9111e422ad8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3f3992146cf4e3de917451d265cd8a3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord540
ord800

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__CxxFrameHandler
sprintf
atoi
_controlfp

kernel32

CopyFileA
GetModuleFileNameA
GetStartupInfoA
GetModuleHandleA
FindFirstFileA
FindResourceA
LoadResource
SizeofResource
LockResource
CreateFileA
GetLastError
WriteFile
ExitProcess
GetLocalTime
Sleep

shell32

ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ