3b02eecc7799c0f7f6ee2d3f92f23954_JaffaCakes118 | Triage

Sharing

General

Target

3b02eecc7799c0f7f6ee2d3f92f23954_JaffaCakes118
Size

116KB
MD5

3b02eecc7799c0f7f6ee2d3f92f23954
SHA1

6e214343993ce908a43b2a048b99d328b193fe0d
SHA256

26d2fa5cfabdaada63c1eda3f6cb5b275b6dd829db75969233635d56b7ed4666
SHA512

49c0fe80f004a09403279ca992e16ae1bdbbc1cb3dc97fe08ec857fd187bd3b941dbdf43e00a71b4ea9fffa2b5fc26209eb4a9fac930e86607406b906263fafb
SSDEEP

1536:tWdUDgCFsQR6aOUvRQRBO/SPs1X4MgayX2lxjWHz6B8qkOQWtXaEn:tWd8gutR6aOUvRQRBHPSoMUm/NuK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b02eecc7799c0f7f6ee2d3f92f23954_JaffaCakes118

Files

3b02eecc7799c0f7f6ee2d3f92f23954_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2247634ef6ad16277157bf7f49b468e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
GetModuleFileNameW
GetConsoleAliasesA
DeleteVolumeMountPointA
QueueUserAPC
GetConsoleCommandHistoryA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ