3b5f099aa7620c1ce4291b547b20d97b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b5f099aa7620c1ce4291b547b20d97b_JaffaCakes118
Size

80KB
MD5

3b5f099aa7620c1ce4291b547b20d97b
SHA1

9cd1f08c6522a5f7f108edaaf0f83b89a268bc58
SHA256

d2e81a752d13d9bcee97f792e651f9f765d3a401f18917041c4d9c1b23132326
SHA512

717378eca95ec6c65ab2e0ea4af0a908c31f0236a9e66c3b54c4fc42cf9c7d7f6c7514627b5f5cb12ef95fe9ab00b32bb2b61a9c6ca840b85db9582486793071
SSDEEP

1536:4uUVRlpTaGnNW8RyoG6SOxFFFnTd1D97LzwbfHWvADUkA8TDhk:ylpeoHh97LW2IQkPhk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b5f099aa7620c1ce4291b547b20d97b_JaffaCakes118

Files

3b5f099aa7620c1ce4291b547b20d97b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e075ac73944bb55a605787395d2773d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
sin
_adjust_fdiv
__setusermatherr
fopen
strcmp
_acmdln
__getmainargs
free
_except_handler3
fwrite
_initterm
fseek
_exit
malloc
_onexit
_XcptFilter
__set_app_type
fclose
fread
exit
printf

kernel32

Sleep
GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ