3c8800e31c2dbc4463c78c416e1181ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c8800e31c2dbc4463c78c416e1181ae_JaffaCakes118
Size

7KB
MD5

3c8800e31c2dbc4463c78c416e1181ae
SHA1

47b382895f279cd5abbc46bd7dd69a501bca7f77
SHA256

d7ef7619a8be3071b055cb182721f4d480afabb2804cb8344a61d34969a2ccb6
SHA512

95169e06ad86d8f8a0d54005febc5f85cf6d00a865570fc480a8aeb032bd27a84d1eff33ff3a9d7e4e291ca8a7f86d078d4a166d74fbeb5902a115030d26913f
SSDEEP

192:KOW2+0x12M3iQpiG2FhEPsDdD3ZE8u5KAa:KOW2zx1viQpiGFEDRZ5u5KT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c8800e31c2dbc4463c78c416e1181ae_JaffaCakes118

Files

3c8800e31c2dbc4463c78c416e1181ae_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9da2debc4134fed05e1481ba89c1068a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegOpenKeyExA
RegCloseKey

kernel32

CloseHandle
ExitProcess
FlushFileBuffers
GetCommandLineA
GetEnvironmentStringsA
GetLastError
GetModuleHandleA
GetStartupInfoA
GetSystemInfo
GetVersionExA
GlobalAlloc
GlobalFree
OutputDebugStringA
ReadFile
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
WriteFile

oleaut32

SysAllocStringByteLen
SysFreeString
SysStringByteLen

user32

MessageBeep

Exports

Exports

LIBMAIN
SerialNumber
dpEdition

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: 1024B - Virtual size: 929B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ