3ea9cdc8d9e3d4acf80fe9210485181c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ea9cdc8d9e3d4acf80fe9210485181c_JaffaCakes118
Size

4KB
MD5

3ea9cdc8d9e3d4acf80fe9210485181c
SHA1

d6a18b456e7fb4c59da69bd36f6e18010639621f
SHA256

c552e226330b4a9e8a7e8461dc5e023a22f2ed06d89798c066958055dcf4e0b6
SHA512

443d626b1b656fdff1cc949145a9171c1ade8e1558b7be519c6885dd1332f50591683121432feeb4bb997b92571bfdce8cccd0ef42c5209d4743b57051a90dfc
SSDEEP

48:CS+VIO7m2PY/3ncltQwMGP0ZuPzU4Hlig/vLuDNXFqzfvw1zGtZklv:RbO3enUttMG8Zuw4HNHyp7cW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ea9cdc8d9e3d4acf80fe9210485181c_JaffaCakes118

Files

3ea9cdc8d9e3d4acf80fe9210485181c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a51d28863af977fd9c16e9b39ae3a79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
_exit
_adjust_fdiv
_c_exit

kernel32

GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 1024B - Virtual size: 842B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 718B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE