3a42d0c4c0f2c4ca4fd497c5329825a8_JaffaCakes118 | Triage

Sharing

General

Target

3a42d0c4c0f2c4ca4fd497c5329825a8_JaffaCakes118
Size

287KB
MD5

3a42d0c4c0f2c4ca4fd497c5329825a8
SHA1

75a4aa7d70f8d26490b2a9516ec2e4e53e8ce603
SHA256

2cef6ce3b6432443134537b3018d002240066cd02dad27e60aba30fecd5b30ec
SHA512

9ea7cb8bb490410bce82bf545dc8950ae6b1f6c0b1a9b1caa56d50e58e4136a24937d86c7d646bad9ec0ca0a331df4bc715d9dc666b2cdb2f9b903fd1651762a
SSDEEP

6144:FdOXfPdaXaZnhlHtJ2L5apxzB0NPXQwO1SGF8D56OZ4QsdJj9W2g7gVa:FovPIXaFDtwL5YpB0Vm1SgC6OZ4QsdJ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a42d0c4c0f2c4ca4fd497c5329825a8_JaffaCakes118

Files

3a42d0c4c0f2c4ca4fd497c5329825a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2e6b20d69b05f1e355753e39d4d6db2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetAtomNameA
GetCurrentProcessId
HeapReAlloc
UnhandledExceptionFilter
RtlUnwind
GetCPInfo
InitializeCriticalSection
GetDateFormatA
SetStdHandle
FreeLibrary
WriteFile
GetTimeFormatA
GetOEMCP
TerminateProcess
IsValidCodePage
GetLocaleInfoA
EnterCriticalSection
HeapSize
EnumResourceNamesA
LeaveCriticalSection
SetFilePointer
GetSystemTimeAsFileTime
VirtualAlloc
GetConsoleOutputCP
GetACP
GetStringTypeW
MultiByteToWideChar
WriteConsoleA
GetCurrentProcess
LoadLibraryA
IsDebuggerPresent
SetUnhandledExceptionFilter
RaiseException

rpcrt4

RpcStringFreeA

shlwapi

SHCreateStreamOnFileW
PathIsContentTypeA
SHCreateStreamOnFileEx
PathIsFileSpecA
PathAppendA
PathCreateFromUrlW

Sections

.text
Size: 147KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ