3ada6cdcc8b1eb935ff171ab6a007634_JaffaCakes118 | Triage

Sharing

General

Target

3ada6cdcc8b1eb935ff171ab6a007634_JaffaCakes118
Size

481KB
MD5

3ada6cdcc8b1eb935ff171ab6a007634
SHA1

783ad9731ba77deac3d8ceeab03ba6d4cb9d649d
SHA256

3cf831f3cfc8c0d4511116ef9b07ae942bad3355daa03521504ae8a8940f4951
SHA512

27f58b2385f8cd15a5510f5f6fdbee80cbc903ddb02dd2c4ab95220930b2c3acb2578afcc269a35c85e9837d79a76250ac1c94d3f4d3cca12bf140a40de93fcf
SSDEEP

12288:ZM3srk4xBN28vqcDbGrTiCyTx2qXoND+0:m8rjxBc8hOzKGS0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ada6cdcc8b1eb935ff171ab6a007634_JaffaCakes118

Files

3ada6cdcc8b1eb935ff171ab6a007634_JaffaCakes118
.exe windows:4 windows x86 arch:x86

547a8a2857231d7625ef18c0d9827cbd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
cos
fflush
fprintf
free
malloc
memset
signal
strcmp
strcpy
strlen

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 208B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE