3a9e75f20a6750a1c3e4c411f0aaf584_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a9e75f20a6750a1c3e4c411f0aaf584_JaffaCakes118
Size

96KB
MD5

3a9e75f20a6750a1c3e4c411f0aaf584
SHA1

af8dc4a2e2b1e8e45afed65e16a5976c818d419b
SHA256

c2eb3c372df70dbcfd7d9e3fdcb9cf714a4f5be86320bc568cec7c4976381f8c
SHA512

bc3a5041364f6d21165426a3808ea59e2a298ee19976ce26b8ce6176b2bf0578df48e6f6dee2e51771293aa90995242f7b69c877c4ba2dd791f90a4b8a17e1d4
SSDEEP

1536:huB4nSJEMJ61uUSnrwau2A23bXrbfOr+ZSgVuxRsF3QQbkr+Fmz+j17pNhZ9jG:hu+SJE/2nbXX2OV2R0gUF/d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a9e75f20a6750a1c3e4c411f0aaf584_JaffaCakes118

Files

3a9e75f20a6750a1c3e4c411f0aaf584_JaffaCakes118
.exe windows:4 windows x86 arch:x86

52473f9696c2dc495bc95f4ca13d0aba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
GetSystemDirectoryA
_lclose
SetCommConfig
GetVolumeInformationA
DeleteAtom
ReadConsoleInputA
GetTempPathA
GetConsoleHardwareState
UnlockFile
IsDBCSLeadByteEx
IsBadHugeWritePtr
GetCommandLineA
GetStartupInfoA
ExitProcess
LCMapStringA
AllocateUserPhysicalPages
GetConsoleAliasesLengthA
CreateDirectoryA
LocalAlloc
lstrlen
RtlUnwind
GetProcessShutdownParameters
ConnectNamedPipe
lstrcpynA
GetHandleInformation
HeapReAlloc
RequestWakeupLatency
MultiByteToWideChar

Sections

.itext
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

WEIJUNLI
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA