3e798af77a5f9377196edda0b263cdfa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e798af77a5f9377196edda0b263cdfa_JaffaCakes118
Size

111KB
MD5

3e798af77a5f9377196edda0b263cdfa
SHA1

3bbd9df6b586eb4e8210bbdc2317a1260d0c9851
SHA256

13a89d3a1af43b1a94f0f39ecb935edd8971f9443407ff91a7a6a62cd6f328b3
SHA512

907138eedaf7c0230fc562ea329d6e6dd849acfc41bd7a5ff4493bef759a94a6545aba320a62b8da2b3efe91ee43fc7f20383e8f6c72950e915239d9050eab30
SSDEEP

3072:Now+6YhKKlR/vZ5zi4ODCxgwzjmcaHlJAM:bYxZTfGL4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e798af77a5f9377196edda0b263cdfa_JaffaCakes118

Files

3e798af77a5f9377196edda0b263cdfa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f893a35aab08425971d8fba522b4579

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetCommandLineA
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ