3cbfc390fb6f7367427d20144a5fcb02_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cbfc390fb6f7367427d20144a5fcb02_JaffaCakes118
Size

52KB
MD5

3cbfc390fb6f7367427d20144a5fcb02
SHA1

bb7a6805a407c02804a54b9ae2d5798971b25ab0
SHA256

f78e61a63549f6c85c9279ea949447612024b05a592076678cd430452685ad7f
SHA512

68452b26a39b4e2c1920a16cd9f77114bdfe96277b0c1db47ad70e74e0eabaa433636468397d2ae56266dcaa24593bde1ef5ae7a05c7d697a0fb76c2141c5817
SSDEEP

768:c5HJBaM2c4TYcZr5ud8iEPSOyKOLsx2KBvvDLtFhYY86ZVSt:KpAM2c8r5ufEPk5LWdPmY89t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cbfc390fb6f7367427d20144a5fcb02_JaffaCakes118

Files

3cbfc390fb6f7367427d20144a5fcb02_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01f10443c263fb2a45ab2f59dde8db9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

SystemTimeToTzSpecificLocalTime
GetLargestConsoleWindowSize
GetExitCodeProcess
ReadConsoleA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ