3c2319d195633be690bf3f64975341b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c2319d195633be690bf3f64975341b9_JaffaCakes118
Size

12KB
MD5

3c2319d195633be690bf3f64975341b9
SHA1

1aa09ff760e5fd7e34ed17b6e8088668e03a9edd
SHA256

4ebce456c14a87dd0366f6617956751936fa52c442705d61cbd791770cda75c0
SHA512

f0c3eca1b179a09636f938ceaeeeda4292753d870fcabadaef8c7a6c7f6016c1b2743d48a9391a1573b54e758f6d38e49ad1f3167587386f58eb725a31236335
SSDEEP

48:inunhTHy/OH3lyzjbGq9SpGbGtOJkBFoc2lFWn:CunpfA9SpGw8/a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c2319d195633be690bf3f64975341b9_JaffaCakes118

Files

3c2319d195633be690bf3f64975341b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9bb598fbecf72f4f96e58ecbf67a7e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FindFirstFileW
FreeLibrary
CreateProcessW
GetComputerNameW
GetSystemDirectoryW
WideCharToMultiByte
LoadLibraryW
Sleep
GetModuleFileNameW
GetStartupInfoW
GetCurrentDirectoryW
GetProcAddress
SetCurrentDirectoryW

user32

wsprintfW

Sections

.text
Size: 4KB - Virtual size: 859B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE