3b394050a9aaf33ad81284633cb5a28c_JaffaCakes118 | Triage

Sharing

General

Target

3b394050a9aaf33ad81284633cb5a28c_JaffaCakes118
Size

56KB
MD5

3b394050a9aaf33ad81284633cb5a28c
SHA1

08b898d57e5424fb070e38cb78ab55233f77877d
SHA256

803f4868bb5219e6abf7c3eaed982e369980531643bc7306b8d6a101b6523fd5
SHA512

56d5bae0aad2efcf72f6ffd51d9f998e48f737bf45baaeffa67870f3f8c3092fefc555006c46617f50ec876de63e586f698c0b9f55a3f4daf4d5defce4490da7
SSDEEP

1536:URXzTg1PQ4nugWavT43cIUjw0hLjS7GrX0HY:q8hQh2jzhLjBKY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b394050a9aaf33ad81284633cb5a28c_JaffaCakes118

Files

3b394050a9aaf33ad81284633cb5a28c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c803988106a0c631801c939d151e818a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleIcon
SetCurrentDirectoryW
ReadConsoleInputExW
lstrcmpi
NlsGetCacheUpdateCount
FillConsoleOutputAttribute
FreeLibrary
BuildCommDCBA
SetClientTimeZoneInformation
RtlCaptureContext
GetLongPathNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE