35e32f01fef28cbebd6f3e0524201b89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35e32f01fef28cbebd6f3e0524201b89_JaffaCakes118
Size

132KB
MD5

35e32f01fef28cbebd6f3e0524201b89
SHA1

cb6412a6314078c075eb33c371c40739488e5444
SHA256

a49eea990c9e859d5b8e0f45a108071bf703e0c2cf5ffbc692323cb6280f4bc5
SHA512

3a97acd85f8e7416b5c4c46d7aed4d266beb65c0ab3d1b5a0bafeec369b08747a8bd6743450daa6b09165ad0916835826aac527e49a2f98402aac10cc7a36b3d
SSDEEP

3072:QMcRSHnY7HL3tjVxWdjDV8KXfnkgM/s6Tt1juDZ0JGrNfeNtZ+:QMcRIY77tjVx2jxZXPTMLT7kZzK7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35e32f01fef28cbebd6f3e0524201b89_JaffaCakes118

Files

35e32f01fef28cbebd6f3e0524201b89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

35374f39eee84a8a46ee7f958496c8ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
TlsFree
TlsSetValue
GlobalDeleteAtom
TlsAlloc
HeapCreate
EnumResourceNamesW
GetStartupInfoA
SetLastError
ExitProcess
TlsGetValue
SetHandleCount
HeapDestroy
GetCommandLineW
GetCommandLineA

oleacc

LresultFromObject

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ