3ad0a163a1e0e4608f4893643b563e69_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ad0a163a1e0e4608f4893643b563e69_JaffaCakes118
Size

96KB
MD5

3ad0a163a1e0e4608f4893643b563e69
SHA1

ee3e82246d4d9669699e771a5b7f0222e9012749
SHA256

bd5e1fad4fdb8db82aa93d7485495b71b77620d8bc51b203f58af0df0b963390
SHA512

e5727b4e026066573599b67f1ec06b60f917f12f324047d4a2c845493a3cdfc28d7a8f1704b9c2657778bc91e2acd48b116a109b0e91febedcad8b2649ffead8
SSDEEP

1536:knWQ7Elan/RPU0aEa0zA/xosRlOVdn+0fDUAs1cZqv3uPfAmZ6MM0ed:PQ7EluP/a7/xosRw3rDUAemqvz86d0e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ad0a163a1e0e4608f4893643b563e69_JaffaCakes118

Files

3ad0a163a1e0e4608f4893643b563e69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8359754059feca1ba93758ce9682f2fe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
GetConsoleCommandHistoryA
EnumUILanguagesA
RegisterWowBaseHandlers
SetProcessAffinityMask
InterlockedExchange
GetCalendarInfoA
HeapUnlock
lstrcpyA
CreateDirectoryExA
SetCommConfig
FindFirstFileExA
ExitThread
SetConsoleCursorInfo
GetCommState
GetCommandLineA
GetStartupInfoA
ExitProcess
EnumLanguageGroupLocalesA
GetCPInfo
SetHandleCount
_lcreat
LocalAlloc
GetThreadContext
GetConsoleMode
SignalObjectAndWait
CancelTimerQueueTimer
SetThreadContext

Sections

.itext
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

WEIJUNLI
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA