3d6dd347897805a6880d1b1ca12c8e45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d6dd347897805a6880d1b1ca12c8e45_JaffaCakes118
Size

76KB
MD5

3d6dd347897805a6880d1b1ca12c8e45
SHA1

da1893ee2e5ec24d9c11454115601aaac881eb8a
SHA256

21423a53ba6c3c1bda11d1ecd5790e461e857ed08d2c9936b1988a2120cdec25
SHA512

d3e1adc1d9edcbfabd6994750d5b15b9b24ab82ef2b252c68d2a0ee6c27bd668afa6bdf7726d69aeb48efe53185d9dfbf7287484b611c950451da5dd40af5f02
SSDEEP

1536:y4DT4XEcTakmBnb0X4lBENbprzT7kla/pjVrs2ryrd1vUQuq6:Fv4TTa/QX47EN1FHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d6dd347897805a6880d1b1ca12c8e45_JaffaCakes118

Files

3d6dd347897805a6880d1b1ca12c8e45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

848eed6aa762ee1d34f8beb31f058579

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelDeviceWakeupRequest
Sleep
GetCommandLineA
EnumResourceNamesW
IsBadWritePtr
GetConsoleCommandHistoryW
GetUserDefaultLCID
SizeofResource
Heap32ListNext
FreeConsole
GetSystemWindowsDirectoryW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE