3e70df58953a74977f00708395e0afa0_JaffaCakes118 | Triage

Sharing

General

Target

3e70df58953a74977f00708395e0afa0_JaffaCakes118
Size

44KB
MD5

3e70df58953a74977f00708395e0afa0
SHA1

1da5c367d0da4e3c86fde1fca64bc8b6042dc0ed
SHA256

00f44cb64b4a655aecc818012a33fe6ed6bc49edc51be2bfd75e69d5fd113460
SHA512

a60f6ad99d372488d0e022419296435c0b40bc1c20a9e4e4a4629950a7da25eab82c6d6222e16c1daf37daca44c77ef1a13c2508c39b5b3ce522860cdf2a9b13
SSDEEP

768:Jxu+QjM5TA2l7Sha5IbKsO67FXCE/63P:Tu+QjQoaMKsO6ZXFcP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e70df58953a74977f00708395e0afa0_JaffaCakes118

Files

3e70df58953a74977f00708395e0afa0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4bbaef4b7739d33c77d05df9e1db675d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetModuleFileNameA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GlobalAlloc
lstrlenA
MultiByteToWideChar
GetUserDefaultLCID
GetModuleHandleA
GetStartupInfoA

user32

wsprintfA
MessageBoxA

msvcrt

__p__fmode
free
malloc
strlen
strcpy
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_acmdln
__set_app_type
_except_handler3
_controlfp

oleaut32

SysAllocString

ole32

CoCreateInstance
CLSIDFromProgID
OleInitialize

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE