3db8f6929c24add30ea44f6fec3e0dda_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3db8f6929c24add30ea44f6fec3e0dda_JaffaCakes118
Size

40KB
MD5

3db8f6929c24add30ea44f6fec3e0dda
SHA1

de34390ce05ceb5a1da09dcf8027008e929d2c7d
SHA256

7bf73912c509a2a1492485c2ef0c881684c4e2d906698bfdeb8033212bed4b83
SHA512

1817197ea180891930f18aad1b25824de0cfb66f8d25bcccfd9244a44b0eb77fc991d3cebe2b1b68476b20c3d39faa2c262a0bf172da1789427b064c82d2b4c0
SSDEEP

768:z/aS4hda/GJfgRWE+4V0c4sid8gUR+4TjeANSDrlfDk:khdL4RWUlireyq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3db8f6929c24add30ea44f6fec3e0dda_JaffaCakes118

Files

3db8f6929c24add30ea44f6fec3e0dda_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2d2fa29f218fae813dfc41da78fcd92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
Sleep
GetLocaleInfoA
GetStartupInfoA
VirtualAlloc
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE