3ad329cea108cf4e53c985c39003ca60_JaffaCakes118 | Triage

Sharing

General

Target

3ad329cea108cf4e53c985c39003ca60_JaffaCakes118
Size

3KB
MD5

3ad329cea108cf4e53c985c39003ca60
SHA1

ce3d5df5f9fcc2f198988075763618c683775b88
SHA256

bf2ff40034da61dfab094f775a3e60b125947b913b15e000d6c656c9d03d3800
SHA512

840c0c727daa3910fe3c63ba8459a89e5f983e7988f511f5534ecf6a73a8235c4e96c2597c2f31ed2048f2c4aa0c1d44472128bd2a49811fc1799280d3c63212

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ad329cea108cf4e53c985c39003ca60_JaffaCakes118

Files

3ad329cea108cf4e53c985c39003ca60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c78d3dbe0b9394442284bc2522966aac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
DeviceIoControl
ExitProcess
FlushFileBuffers
GetSystemTime
GlobalAlloc
GlobalFree
LockFile
ReadFile
SetFilePointer
UnlockFile
WriteFile

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE