3e2d2c80577ac54b79da11d74bdbeeb9_JaffaCakes118 | Triage

Sharing

General

Target

3e2d2c80577ac54b79da11d74bdbeeb9_JaffaCakes118
Size

1012KB
MD5

3e2d2c80577ac54b79da11d74bdbeeb9
SHA1

c3c95c22f9f3f2f02941b63ed5add02830b8a540
SHA256

0e1ee4e771bb4ff4e5eb086a198530a57e03b9294170014b280bea940aeb1756
SHA512

99b79989c7f92d96560b2c10812111bb272e62ae2abd364c831d3d1f5300525dd4b4209561d8c78c70a7f1ef0b48964192e37fd5ec017bb2125c8b1aeb0d6fc4
SSDEEP

24576:EEWOM+Ei0UvF/Cil7Hk2PClGoRgfhEeU/cvSF1joEcboEaL:ERc0y/dlQ2PNIgfKn/cu1UjMEaL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e2d2c80577ac54b79da11d74bdbeeb9_JaffaCakes118

Files

3e2d2c80577ac54b79da11d74bdbeeb9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2a38d9ad3409a50dc844fb8deec2bb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocString
VarI1FromI2

kernel32

GetModuleHandleA
GetStartupInfoA
GetCurrentProcess
MultiByteToWideChar
InterlockedIncrement
ExitProcess
TerminateProcess

Sections

.text
Size: 839KB - Virtual size: 839KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.version
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ