3e77f785b1fb4171fa8ecda6a779da03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e77f785b1fb4171fa8ecda6a779da03_JaffaCakes118
Size

87KB
MD5

3e77f785b1fb4171fa8ecda6a779da03
SHA1

16587e1ce4b40e956c383346e68d924bad51074d
SHA256

9e0093f7ed026b6390509e897a23822de0c986ebe0230b5236d8fa13807c1c48
SHA512

b071984450df681a272f38ebef66267feeab5546820125583cc6e0648e28909945e2989d44666772af729bb78cf84fabe3665b8720ab1a7eee51887930e46a21
SSDEEP

1536:ycER6RT/uWkjuSM55qPkCmwLph5//pVLfKooFaJ6fdD9:yibkjuNfCmYdLXoFa8fdB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e77f785b1fb4171fa8ecda6a779da03_JaffaCakes118

Files

3e77f785b1fb4171fa8ecda6a779da03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9f4ff6809a756ba118be531496fe20ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
ReadConsoleA
SetConsoleCP
ExitProcess
GetConsoleMode
Module32First

user32

GetMessageW

shell32

SHGetFolderPathA
SHGetMalloc

Sections

.icode
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

j4raccbz
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 1KB - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ