3ab1dec4931563c5724b855a1ca8748d_JaffaCakes118 | Triage

Sharing

General

Target

3ab1dec4931563c5724b855a1ca8748d_JaffaCakes118
Size

25KB
MD5

3ab1dec4931563c5724b855a1ca8748d
SHA1

acb012e2c454afdebc97924a6bbc935f24bdcde7
SHA256

e62c8cd2f6c10bfd731dca630fdd4c8e3d5c9b391976f4402d08a4fe11c49c50
SHA512

968b2000ae29c381dd5229f7f26fa7820727fd0d742ae872468ae355de0f824476e1ce753cbf5b657f4f9e7b55f2bd0e8faeafb4a6a1c4ef99a25b2df21a21a9
SSDEEP

384:zdj4sgLfWCGJY6O4DTGm4hEEZxgoZFNQsLFOwiC2wKsEaVh2O9h8CQO4Hej0EvO3:CO5y6O4D2hvZF6uVDEg2O9h3y8pvO4a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ab1dec4931563c5724b855a1ca8748d_JaffaCakes118

Files

3ab1dec4931563c5724b855a1ca8748d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e6f5c79cc71da319afae1ebd18f8e1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalReAlloc
GetTempPathA
GlobalAlloc
CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
GlobalFree
CreateProcessA
lstrlenA
ExitProcess
DeleteFileA
GetExitCodeProcess
Sleep
ReadFile
SetFilePointer
GetFileSize
WideCharToMultiByte
MultiByteToWideChar

user32

wsprintfA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ