3902fb6501b383e7fcc63451f367fd82_JaffaCakes118 | Triage

Sharing

General

Target

3902fb6501b383e7fcc63451f367fd82_JaffaCakes118
Size

47KB
MD5

3902fb6501b383e7fcc63451f367fd82
SHA1

1e9b6f1b9576088752145acff8f739ad0298bcf4
SHA256

7f7a9c096197c86ed030441ae2170856a86b7987cbdc03e6dd6995eb477d4637
SHA512

5f5340e59b444af7f69e9b678ede4f0d28c42b896e7d0dc7ff0f8a94c09c9fb533e08f376e7f77447f1e06cdd5ee10f1f73f115971fdbcbe7bf4adea6993ea32
SSDEEP

768:oTMegW662heGq+Uh6oiswwlMPBoYyNG95zKQKuvH24BVRuSwX7cwJ44rOg0:oTTJ32AV+Uh6Of06Fw/xvTbuSbwa4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3902fb6501b383e7fcc63451f367fd82_JaffaCakes118

Files

3902fb6501b383e7fcc63451f367fd82_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cc99e05b7190a016eb4e7dbb3f398a80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
EnterCriticalSection
ExitProcess
FindResourceA
FreeResource
GetACP
GetCommandLineA
GetDateFormatA
GetLastError
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemTime
HeapAlloc
InitializeCriticalSection
MapViewOfFile
MultiByteToWideChar
OpenFile
SetEndOfFile
SetLastError
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree

msvcrt

__getmainargs
__p__commode
__set_app_type
_cexit
exit
rand
setlocale
sscanf
vswprintf

ole32

CoCreateGuid
CoCreateInstance
CoInitialize
CoInitializeSecurity
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
StringFromGUID2

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ