3bddc54bf4ba72cba9c263039f9a9fa5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bddc54bf4ba72cba9c263039f9a9fa5_JaffaCakes118
Size

32KB
MD5

3bddc54bf4ba72cba9c263039f9a9fa5
SHA1

0cf8e5face2d7133654e1028f26431bbabc681d6
SHA256

438d88d774140d5054c0120fb3dbe3fa40c69ac1385a25d484b10ae064c71c0f
SHA512

733b6bf1600b65c38086a6c264537f04bc5cd951402f1b6365b6a08f327dc577549a1b7f1e129cc826f28b4df3bbaa672f493b4bd7c1490496a36255857cb5f7
SSDEEP

768:cq482ofiIWlhj5e3cpL4qWhKhWdTmdcF1i7h5lW4a8Gb:i82ofiXlHesJ/KdT+cFGXKb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bddc54bf4ba72cba9c263039f9a9fa5_JaffaCakes118

Files

3bddc54bf4ba72cba9c263039f9a9fa5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

aeea4399c3ff53fc245aaf8419919963

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleW
CancelTimerQueueTimer
ClearCommBreak
CopyFileA
AddAtomW
FindAtomW
TerminateProcess
FatalExit
GetConsoleCP
SetUnhandledExceptionFilter
GetCurrentThreadId
BeginUpdateResourceW
EnterCriticalSection
Sleep
DeleteCriticalSection
LeaveCriticalSection
CreateMemoryResourceNotification
WideCharToMultiByte
DeactivateActCtx
GetConsoleNlsMode
GetLastError
CloseHandle
CreateMutexW
GetSystemTimeAsFileTime
DeleteTimerQueue
ExitThread
CreateFileW
AllocConsole
ExitProcess

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ