3ba1d1466d6b3229a6ffe925afcb2516_JaffaCakes118 | Triage

Sharing

General

Target

3ba1d1466d6b3229a6ffe925afcb2516_JaffaCakes118
Size

79KB
MD5

3ba1d1466d6b3229a6ffe925afcb2516
SHA1

023928fde1274f8aa0927e4151a0084d970e475d
SHA256

6b7453e59deb7a3ecfa8ef0fe7b5ce8a682e6deb9302bfbc646d79026aac47c7
SHA512

c372d06cc1517e68ea0363b6770a7ede82aaa856b514453cff808a661df27860355c4a1edf4cbde21ffbfc156000ed9390a583465c685a8c427eceec648ee62f
SSDEEP

768:KlqlnX6cijRszVeSHTNIL0xYiRJqjyoSQhzcmfZwfGd97E/60o4D43:Aciq7TNILIYiSj4QlTd2/to33

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ba1d1466d6b3229a6ffe925afcb2516_JaffaCakes118

Files

3ba1d1466d6b3229a6ffe925afcb2516_JaffaCakes118
.exe windows:1 windows x86 arch:x86

7ce78ee4d99ef9b33c08c410d9f3025e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

GetCommandLineA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
CloseHandle
MapViewOfFile
CreateFileA
CreateFileMappingA
RtlUnwind
Sleep
WriteFile
DeleteFileA

crtdll

__GetMainArgs
exit
memset
raise
signal
strchr

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 760B - Virtual size: 760B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE