3c66de1b10bfde707d5f8717781f29b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c66de1b10bfde707d5f8717781f29b2_JaffaCakes118
Size

76KB
MD5

3c66de1b10bfde707d5f8717781f29b2
SHA1

794f8d33dd4016c79f59f3497d7ddaf3192ad40d
SHA256

6dd414e0bde6a33aa6b7a84dae1a0884e8c9c0cba01a77c786fbda13c6770424
SHA512

48b4fdb30564e723e224716a1c3702640c9d1fb86e5c78a14425e8c1542cc5d8a847bdf8181a285b9d9617e892a4b591f4b7d55f674996effcd386cf12e7ca96
SSDEEP

1536:9+6ApWaxCAl2v6RELks6BWb1Fz6mhST6/yMjk34:I6Ap/xbOqcks6I38iB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c66de1b10bfde707d5f8717781f29b2_JaffaCakes118

Files

3c66de1b10bfde707d5f8717781f29b2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

773fe2131b9a9017096800dec51401d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt40

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__getmainargs
_except_handler3
_controlfp
_initterm
__p__acmdln
exit
_XcptFilter
_exit
setlocale
__set_app_type
mbstowcs

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryW
GetProcAddress
FreeLibrary

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE