302eb3832771da3c3bc96299a8e54927_JaffaCakes118 | Triage

Sharing

General

Target

302eb3832771da3c3bc96299a8e54927_JaffaCakes118
Size

108KB
MD5

302eb3832771da3c3bc96299a8e54927
SHA1

21dde9bcf3f3915c666a8b8ac3cf95300e151a2a
SHA256

e8eee59b932ee2ee275b9ab099519af0631cacb17bf5b0da6fcfc8f56e0b5a5b
SHA512

aec9802f6f21ae86b2880e9068170d0e032694f4232dc38e417dd570dbefb0a1b6907e8ac1d2cd4fd2122dccd0c0148800811405b7871207ee8f3940c8d8166b
SSDEEP

3072:R3H8pXCnUxq+/sZuaGUu3uB7sYOk2Wnc1kzSTyBY:R3H+CUxq+ounfuB7SWSTt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
302eb3832771da3c3bc96299a8e54927_JaffaCakes118

Files

302eb3832771da3c3bc96299a8e54927_JaffaCakes118
.exe windows:4 windows x86 arch:x86

73ceb7a51ffa1f699790766adfcd2acf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

InterlockedDecrement
GetTapeParameters
GetSystemDirectoryA
WriteFileGather
InterlockedExchange
GetProfileIntA
GetWindowsDirectoryA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ