38b95f8c12bae2f604dd6ae2d3533725_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38b95f8c12bae2f604dd6ae2d3533725_JaffaCakes118
Size

120KB
MD5

38b95f8c12bae2f604dd6ae2d3533725
SHA1

ad1e7efd4a9657096250abceca34ade24186863f
SHA256

93a854150b2758bc6532d6264109c93401ef12f8b7fd5a889ee23708d85da4f0
SHA512

3e8f09547853f0471cd7ef8b0bf37a0b30c3f27ad7898769c0826f9bc6d0470d7adc3c161857566dc2654e46654c6e55616fcd47f11a7a0228c2f3e0899d6d7d
SSDEEP

3072:qP2vFjSSvSSHWjAAvMMMJkPGGyXq/cX3sDdofYRxYv0s:qedSSqAAwKPGz3x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38b95f8c12bae2f604dd6ae2d3533725_JaffaCakes118

Files

38b95f8c12bae2f604dd6ae2d3533725_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ef3a0c6b6b4f845864cd9e2b781d9c93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
AddAtomA
ExitProcess
ReadFile
SetErrorMode
GetProcAddress
GetModuleHandleA
HeapReAlloc
HeapAlloc
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text2
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 386B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ