338b3707290eea3320c4c34278699eff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

338b3707290eea3320c4c34278699eff_JaffaCakes118
Size

113KB
MD5

338b3707290eea3320c4c34278699eff
SHA1

99c2371cc354821d378b4ada89606ac016297929
SHA256

9f6843a4987c5c9d6f2fae4ca24485be693d372e3a4c7027cfd061f84f6cc615
SHA512

cfeedf6aca388ac52014adef211fb2c935fc8c77ff2cd6ba0ec4a351096e652d0ad4ed4975d4b95f71272a6501d3d58cfbb5fcf4e2b1ab2b90402bb59ebf61bf
SSDEEP

3072:kpOb2muVGXasNP3kjtWBOGPv7Yjh3297es0ven+Te:kpOiHIasN8IOYA3fv+P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
338b3707290eea3320c4c34278699eff_JaffaCakes118

Files

338b3707290eea3320c4c34278699eff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e61601d4eb56a0a9cd9e465ea3bbc915

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
GetSystemInfo
WriteProcessMemory
SetEndOfFile
GlobalSize
SetLocalTime
VirtualLock
SetFilePointer
GetStartupInfoA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ