3973ee18e42eecd19fbeb2cda648dd1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3973ee18e42eecd19fbeb2cda648dd1d_JaffaCakes118
Size

66KB
MD5

3973ee18e42eecd19fbeb2cda648dd1d
SHA1

5686496f605676046a074b62ed8906b81d0c1252
SHA256

a024731ec3bb02f63b6a6cdcd52f4a9d58dff31bf39c927f6e342c25a7378fcc
SHA512

ba36442cad772b8d1e9247b5687c617f0971067b66614c9b01a59bf8cc7ef42b0fc0f39306585e213151c2ae524b1954344bdca55af558322573a9324aa636c5
SSDEEP

768:4YDjjjSYqr7mRUzqKdgWOnrn9CzJJ92tvKeJ+A2ZjmeVc4H/9IGxx1Sa+sDqZikQ:1CyxCtJowAWHucwa+DiZqdqpMtZkAGbn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3973ee18e42eecd19fbeb2cda648dd1d_JaffaCakes118

Files

3973ee18e42eecd19fbeb2cda648dd1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0a21af3c0f30b2706710f7ed9cd3ba36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
ReadConsoleW
HeapCreateTagsW
GetWriteWatch
IsBadStringPtrA
SetCalendarInfoW
GetVolumeNameForVolumeMountPointW
ResetWriteWatch
SetConsoleCursorPosition
MultiByteToWideChar
GetDefaultSortkeySize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE