3b4bd5c36b815cce4cc22c7b37a89497_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b4bd5c36b815cce4cc22c7b37a89497_JaffaCakes118
Size

63KB
MD5

3b4bd5c36b815cce4cc22c7b37a89497
SHA1

a32393836e07f2e936ba553b8ea3192b987198ab
SHA256

3f7eed192eabd67906cca713e1a76d221f1bfd3a2eb36207298ad18640bd9495
SHA512

4b6ff36fa7efa4973ceac7d82f0dd520ab46600f20aacafa64ea9ed65016471859f9f4dd9f637a0a58e947478d708325eb3d9e77bd0c7919fe2aa3b2c5f0d97c
SSDEEP

1536:EFruPhg4RHoT+8abKhfMIY81745vIuwYqDn1e7RHS+TA2lhnWu:crEgAlVwUIYe45vJGqRHSKhnWu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b4bd5c36b815cce4cc22c7b37a89497_JaffaCakes118

Files

3b4bd5c36b815cce4cc22c7b37a89497_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e3b9786dde05fd9ea3b5cc8a9bb341bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsProcessorFeaturePresent
CallNamedPipeA
SetConsoleCursorMode
GetTickCount
InterlockedCompareExchange
MoveFileW
GetCPInfo
SetConsoleNumberOfCommandsA
OpenWaitableTimerW
_lcreat
lstrcmpA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE