3d972f52b466b6fa70ecc94b246ce766_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d972f52b466b6fa70ecc94b246ce766_JaffaCakes118
Size

42KB
MD5

3d972f52b466b6fa70ecc94b246ce766
SHA1

815fd2de8c993ba3484e193d5c61e14fcee74a1c
SHA256

d2a1be4587fb6c5b9c43a95c41ba7a5f956a588925323e221fd711c3d5e968f3
SHA512

3be4b4bd1a3322578ae43ba4bf5784f0fb222f31cab275bc8f4022ba2abe62d4c889c793bf6051ff487d6c3cb0b66bc451ca0f2626a4c34d63ba4ad24ef8ff9a
SSDEEP

768:veMeTX3Ssxmn2cy2vUJFerXreXrEY+uOTStpvnWK3ih:2ZKnQ6XrHzVOtmh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d972f52b466b6fa70ecc94b246ce766_JaffaCakes118

Files

3d972f52b466b6fa70ecc94b246ce766_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fe91c44b848e1010b9e484763fe5a148

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceLanguagesA
ExitProcess
FreeResource
GetACP
GetCommandLineA
GetFileSize
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree

msvcrt

_XcptFilter
__getmainargs
__p__commode
__set_app_type
_cexit
_except_handler3
_stricmp
exit
isdigit
malloc
realloc
sscanf
strpbrk
vswprintf
wcscat
wcslen

ole32

CLSIDFromString
CoCreateInstance
CoGetMalloc
CoGetObject
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
StringFromCLSID
StringFromGUID2

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ