3b94e5860e954d55f4a8d7395c2524df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b94e5860e954d55f4a8d7395c2524df_JaffaCakes118
Size

33KB
MD5

3b94e5860e954d55f4a8d7395c2524df
SHA1

a894fe71baf489c631ea3bfef46512ca8d261078
SHA256

f84aecba4e9d025391c438e6dafc24ea6117510b2905af67361d59d5c2dad654
SHA512

b388d0997e4c35c123c640957eb540b9ed2e9eb9b983a166d1c1f3bb81034426bedc28f08c9277ed7058a953f307616ea0c71af6462e2d734e0291175efa863a
SSDEEP

768:Gr9TjhSWaNug82mi55smSDJoj96JhoJJtTcS7pSFfVAm:Gd4Qg82mi553oo8JG/tQSlSFfVAm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b94e5860e954d55f4a8d7395c2524df_JaffaCakes118

Files

3b94e5860e954d55f4a8d7395c2524df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8c96cecb60f4199a4d8468d77328dacf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
SetConsoleCtrlHandler
SetPriorityClass
LocalFree

msvcrt

strcspn
_pctype
strcpy
_wcsicmp
_wctime
__getmainargs
wcsrchr
_except_handler3
_stat
abs
_isctype
_strnicmp
fprintf
_ltow
_snwprintf
wcscpy
memset

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ