3cf899cd001237bb9f1322ffc34c799a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cf899cd001237bb9f1322ffc34c799a_JaffaCakes118
Size

63KB
MD5

3cf899cd001237bb9f1322ffc34c799a
SHA1

9a0b3cc3c2980f32e24a41c42aede0342706af9f
SHA256

b5fbe5005120c0e40b15746a1ccc1f54d74620cc9028557812d2d4082df5a843
SHA512

3d10cea3ad23a0addf840dbf3d6c134515352d1d532721cc0af2e214723eb84a3656b7ed7c430ce21ce595c18bf4f8ff91773d3337b20d4ec8d6a0055e488e37
SSDEEP

768:vGkDtygfSmzbRSOq4M4yTdt2mblplx5sALUfnRsBuGAOuNMaci1LYzBrZwPDBNfi:vIhEutbzlhBXGm5W33kIle605i1g1h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cf899cd001237bb9f1322ffc34c799a_JaffaCakes118

Files

3cf899cd001237bb9f1322ffc34c799a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd6712bd258653a313449d1920afd09c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyLZFile
GetProfileIntW
WaitForSingleObject
DelayLoadFailureHook
WideCharToMultiByte
PeekNamedPipe
UTRegister
GetVolumePathNameA
GetThreadPriority
GetPrivateProfileSectionW
SetProcessShutdownParameters

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE