3d8dc0139d01df2da5f12e8ab59bdf39_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d8dc0139d01df2da5f12e8ab59bdf39_JaffaCakes118
Size

33KB
MD5

3d8dc0139d01df2da5f12e8ab59bdf39
SHA1

d8aadfe4c71ef90fddbd9aacc17048852b5bedb1
SHA256

8c94a8d5cc509946048a4b9d5a1dc591c13f2502071b102de575c2c5cd48b0e6
SHA512

f7eb66e8944bae6171782e1c31c6eb48cdd7f8644d786523babd6c3f18aacc8dfb0d0a087abeb523fcd11031fc41b0ff7312470f72c913a890e42394c6ad00c5
SSDEEP

768:IdvGIRROlLWntUj01evyLCVvRleh28+zDszyLVv9D3h:WfnOhPQ1eK8lG9+zDHvNR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d8dc0139d01df2da5f12e8ab59bdf39_JaffaCakes118

Files

3d8dc0139d01df2da5f12e8ab59bdf39_JaffaCakes118
.exe windows:5 windows x86 arch:x86

69554cd2a6527aebaadd24b6c769fd05

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_controlfp
_adjust_fdiv
_except_handler3
__setusermatherr
__p__fmode
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_write
_c_exit
_initterm
__p__commode
strchr

kernel32

LocalFree
FormatMessageA
GetModuleHandleA

lprhelp

GetShortQueue
CloseLPR
GetLongQueue
OpenLPR

user32

CharToOemBuffA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zpxngnp
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE