3736164ff168148dd205b282fe7435f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3736164ff168148dd205b282fe7435f6_JaffaCakes118
Size

28KB
MD5

3736164ff168148dd205b282fe7435f6
SHA1

e4458a64b708f3f967289868efdb45bd44b1ca73
SHA256

942074eb77ff702f1f8f528c960a20b9f48e586fe97957bc7b96f34b8ca22683
SHA512

b6e798918f77c8799b4cd9a5c87f666d984c04987539f30c0c779cf182eb867c2f89864f2a742193c685f7fb8beccd9f6056a381d57343c831cf2128ee3547e7
SSDEEP

384:ikHZfQoGZuyXyKSLYm+o+Tdp3+3Y74HiAxQ:ikHZfQ/jwLt+ol3akQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3736164ff168148dd205b282fe7435f6_JaffaCakes118

Files

3736164ff168148dd205b282fe7435f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f5e60c492e0f90228f66a91f54ce0927

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
CloseHandle
ReadFile
SetFilePointer
GetFileSize
CreateFileW
CreateDirectoryW
GetSystemDirectoryW
FindClose
FindNextFileW
FindFirstFileW
SizeofResource
FreeResource
GetProcAddress
LoadLibraryW
FindResourceW
GetModuleHandleW
FreeLibrary
WriteFile
Sleep
GetStartupInfoW

msvcrt

wcscat
wcsstr
wcslen
??3@YAXPAX@Z
wcsncmp
wcsncat
wcsncpy
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
wcscpy

Sections

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ