3758c97d061fcc0dcabdcb0735cbf47b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3758c97d061fcc0dcabdcb0735cbf47b_JaffaCakes118
Size

96KB
MD5

3758c97d061fcc0dcabdcb0735cbf47b
SHA1

e840d48ad2bf84ead3f4005c8988c7881d40cb2d
SHA256

9f69a1932b7a2e7b28f5931d2f498fbede26ac6859fc5e27a0fcabbb0b17ddf5
SHA512

465ef9bfd8e55133954cdf17cb1fedf303d7530b7a0575b14f43bbc6c01ceaeb0379f1ff1d8a7e9e9315792726ea25669b2329b08687ff930dfbd66b9e450d36
SSDEEP

1536:elwcPl2RnjcYPNXJMWDyhiuPcUbx8AVGlaslu9E6hMv5dVGeFYp7F1QlqtxZlV7F:elFdeFDDwP/VKJc9vhGFYpJ1Qmfb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3758c97d061fcc0dcabdcb0735cbf47b_JaffaCakes118

Files

3758c97d061fcc0dcabdcb0735cbf47b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c41b2ec0267c3f2c1675fce702963697

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
ReadProcessMemory
SetEndOfFile
EnterCriticalSection
FindNextVolumeA
FindAtomA
CreateJobObjectA
GetFileAttributesExA
FindFirstFileA
GetProcessIoCounters
MapViewOfFile
lstrcpyn
GetMailslotInfo
GetCommandLineA
GetStartupInfoA
ExitProcess
MoveFileWithProgressA
SetupComm
WriteConsoleOutputAttribute
GlobalMemoryStatus
VirtualFreeEx
GetCommTimeouts
SetConsoleMode
MulDiv
FatalAppExitA
DosDateTimeToFileTime
_lcreat

Sections

.itext
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

WEIJUNLI
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA