34748d3767e7405d81c652d8924e219e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34748d3767e7405d81c652d8924e219e_JaffaCakes118
Size

105KB
MD5

34748d3767e7405d81c652d8924e219e
SHA1

ca118e63d6289465c625514fe41e222bd15b324d
SHA256

c9c8f6a79c1cd146065c8fb8063b76f1078702e0b7078e66db7b007fcb6aa117
SHA512

9632c60f2191dec4808015897f0c31533896096f19c73f1e1a8f2ff69b8185f9a5b653f0f964a2eee28d86652d63bfc431bac71180c2c54f104e547125b7dab8
SSDEEP

3072:7S53UsFOBUNeIg3SGe/13WL5ZDy6JfB83:kFeA1gk/NWlZDy6NK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34748d3767e7405d81c652d8924e219e_JaffaCakes118

Files

34748d3767e7405d81c652d8924e219e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbe24ead9b0895c22c877c321ca3f35d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

GetModuleHandleA
ResumeThread
GetSystemTimeAdjustment
InterlockedIncrement
OpenFileMappingA
WriteProfileStringA
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ