3ae0ee75a805dfd361f0f5d009c40a4b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ae0ee75a805dfd361f0f5d009c40a4b_JaffaCakes118
Size

24KB
MD5

3ae0ee75a805dfd361f0f5d009c40a4b
SHA1

4a4e0fc59bb2ed973a151731d7d1484391623910
SHA256

2b0f8b0572627d0dc9ef0f97ef07bf6070f927eac65f51383c3031220656e5b4
SHA512

4de7e1144134cc724c7bd87525bea96c012b89633d1794a4aff58a2bbc5be03cce7a37a5a997b23b5153ded648126f5bf7fb754e8d66f024c821e405e68709a0
SSDEEP

192:6MTBjWbh4GamKubZRT/SsZmSP1oynRddtl:XNjW9zK+tKam81vt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ae0ee75a805dfd361f0f5d009c40a4b_JaffaCakes118

Files

3ae0ee75a805dfd361f0f5d009c40a4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca3b7d834503b19a347a54992282429c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleHandleA
GetLastError
SetLastError
CloseHandle
GetStartupInfoA

msvcrt

_XcptFilter
exit
_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE