3b84327b103868283fcfd2bad6e929b7_JaffaCakes118 | Triage

Sharing

General

Target

3b84327b103868283fcfd2bad6e929b7_JaffaCakes118
Size

88KB
MD5

3b84327b103868283fcfd2bad6e929b7
SHA1

2deca8fff50bef403ef9277366c914ef746adbbd
SHA256

e656a7eba3ff4f0884b2515e8bfed73fa5a3d627d537a9679b81e90f4c3fa8c4
SHA512

cc8ad6fe3dec633965eeaacb48521a0acd878cddde17b20682e7434c25be0bac06ee5afc2aac0890c3154ed21b20a353d6153e6c9e6a280610da2ff13df8e6eb
SSDEEP

1536:L1QDbceiddOmHjG0Cw6NJMvw8vLzGMUOjpDUg6sigZZ0i9B3rmE/yU2uX:L1QDQnbOEK0GNAw8vLzGM7jaFNwZ0U8m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b84327b103868283fcfd2bad6e929b7_JaffaCakes118

Files

3b84327b103868283fcfd2bad6e929b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

608f5b298a2a2ca6f9e0d65674428e2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleA
lstrcpyA
GetCurrentDirectoryA
GetTempPathA
GetEnvironmentVariableA
GetModuleFileNameA
lstrcpynA
GetSystemDirectoryA
GetCommandLineA
GetStartupInfoA

user32

CharUpperA
DialogBoxParamW

msvcrt

__getmainargs
memset
memcpy
strcmp
strcpy
free
_exit
_XcptFilter
exit
_acmdln
malloc
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ