3e06d88dd7a6b61a7161ec35f44fcdb9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e06d88dd7a6b61a7161ec35f44fcdb9_JaffaCakes118
Size

120KB
MD5

3e06d88dd7a6b61a7161ec35f44fcdb9
SHA1

aac5d7cc4393319a013e664f3c4c2bfd0576f45c
SHA256

9b80e2b3f31ece6485b8495f33f1b8b6e9960492bb351eda8d856b90e0bd083c
SHA512

cbd3943bd563e06c10ffd12645cbfb7de25b400e3e2acbfb8395897260a6d8fd71bb87c3660b821ca5a376fccd040878971b3b3dcb940fed08e989871e11c484
SSDEEP

3072:K/KHp5ZqOq44QL/o0eGvR5+SlslEWlw9:K/a5Zq44b0FR5+SlFW6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e06d88dd7a6b61a7161ec35f44fcdb9_JaffaCakes118

Files

3e06d88dd7a6b61a7161ec35f44fcdb9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37c37eeaca79df880cb1ac8eb1dfffdb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
WriteFile
CreateFileA
DeleteFileA
GetSystemDirectoryA
CloseHandle
GetModuleHandleA

shell32

ShellExecuteA

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_exit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE