3ad3911955f52873f0075a0c181cfa78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ad3911955f52873f0075a0c181cfa78_JaffaCakes118
Size

189KB
MD5

3ad3911955f52873f0075a0c181cfa78
SHA1

4b8c42b981fc71a74dad6aa8cc76e909667bb4b2
SHA256

56e8832aef7cfbff0f127cdab5b2d44fcdc117246bb7860b8f09be912f41c014
SHA512

714f0ed895975c43a93fbcb971c01395518f40da278a1461419f6b7ac9e173ec2ba7cdab6817e7357a92bf7dce12fa2622e86f6f4f1fbb265fe5ecde8ccd30a8
SSDEEP

3072:cRNiNfK7PmPmXT8enJFR/RfdQN4Ac7KVAwUWSovlraWP8Gw9T0A:qkNfK7PmP8zJFRJfczsMfflrpsT0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ad3911955f52873f0075a0c181cfa78_JaffaCakes118

Files

3ad3911955f52873f0075a0c181cfa78_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14644f0b4a22b6e3b25ed15405ed3644

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetDiskFreeSpaceA
GetAtomNameA
GetEnvironmentStrings
ReadFile
GetCPInfo
SetFilePointer
IsBadCodePtr
FreeLibrary
VirtualProtect
SetStdHandle
GetThreadLocale
LCMapStringA
GetEnvironmentStringsW
EnumResourceNamesA
GetFileAttributesA
CreateFileA
FindFirstFileA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
SetUnhandledExceptionFilter
WideCharToMultiByte
LCMapStringW
UnhandledExceptionFilter
GetStringTypeA
GetOEMCP
IsBadReadPtr
FlushFileBuffers
LoadLibraryExW
GetFullPathNameA
MulDiv

shlwapi

DllGetVersion
PathIsFileSpecA
PathIsContentTypeA
PathAppendA
SHCreateStreamOnFileEx
PathCreateFromUrlW

rpcrt4

RpcStringFreeA

Sections

.text
Size: 99KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ