3400ad7233750207b355f31411ac68cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3400ad7233750207b355f31411ac68cc_JaffaCakes118
Size

8KB
MD5

3400ad7233750207b355f31411ac68cc
SHA1

c7f8151d005a457f23f9fa24e645dc3074124870
SHA256

b02a4a11f7d9f043ea595e74c58871f5d3638ee44192b822a726bd8d56c26f96
SHA512

89584ad3d7f014204585ea52f168503d0c513dd129b6b12f05bf8d9078f6a248f79841454efa25f27e1232743b09337250fadf895e2c98eec366342e34de3e2f
SSDEEP

96:gGUM/MMEa3Z5QoanWzVTCbRSAHb3+47r4+b0wc8twjb/YiGJyyHSi1:zHLp6IzdCbjb+4fHb0wXwrCyyyi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3400ad7233750207b355f31411ac68cc_JaffaCakes118

Files

3400ad7233750207b355f31411ac68cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a78f66092c2136e6a2de863dda8a88a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
SetFilePointer
CreateFileA
TerminateProcess
ResumeThread
VirtualAllocEx
GetProcAddress
GetFileSize
ExitProcess
GetTickCount
lstrcmpA
GetWindowsDirectoryA
ReadProcessMemory
GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
WriteFile
GetStdHandle

advapi32

GetUserNameA

user32

wvsprintfA

Sections

.rdata
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE