3aae47c819303a81fce5961ccdc0ac33_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3aae47c819303a81fce5961ccdc0ac33_JaffaCakes118
Size

25KB
MD5

3aae47c819303a81fce5961ccdc0ac33
SHA1

b6667a9909c4639d63c381668a9ff987a572bfd3
SHA256

372b6988af6f8d26849ab90e89fef297cd99a694f52d12f98183f6bf55a3e8e7
SHA512

f377506db7d8ed17ab17a8956a43cff25d81faf5f0027726443c94de0ff4064413eef2d77e878311089ce296e69cf3b39c0a69e1d166127244f3345b82324a9d
SSDEEP

768:178YdQXVUisRI1FUoYv+NgJkjtSuEYfdck:x8Ydo+xRILURGNNAuEY1ck

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3aae47c819303a81fce5961ccdc0ac33_JaffaCakes118

Files

3aae47c819303a81fce5961ccdc0ac33_JaffaCakes118
.exe windows:5 windows x86 arch:x86

765ad8a2a708c6cc027a4eb59a77006d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
ExitThread
GetModuleHandleA
GetStartupInfoA

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_adjust_fdiv

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 623B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ