3ec94d5b23a7e199378a89811b356a72_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ec94d5b23a7e199378a89811b356a72_JaffaCakes118
Size

863KB
MD5

3ec94d5b23a7e199378a89811b356a72
SHA1

8448b921f5fc8dfc6f88d4d0da46cadde589eec7
SHA256

2c1a76d068009b889b02b5e30e02afbd54bb52f83c72ce1aa3a8d422e92f0252
SHA512

6b9a71bfbc70c1e23820cff04d338b2e4428f233646090391ae8a673cf4e8ce9bead34f4cae9fe9a3bd7ba9aaf992b0ab82e0a3a06a41710a0c3a66985422bfd
SSDEEP

24576:a6mOaV++J++++YdtLQFFFFw54darCh3JFJNayzxwSagbL:aDV++J++++YdtLd54/h3nDvxfbL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ec94d5b23a7e199378a89811b356a72_JaffaCakes118

Files

3ec94d5b23a7e199378a89811b356a72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db361c3e04c49f2411ea8370e544241c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_initterm
_wcsnicmp
asin
wcscspn
wcschr
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
??2@YAPAXI@Z

kernel32

GetUserDefaultLCID
TlsFree
TlsAlloc
GetModuleFileNameA
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleA
lstrlenW
WideCharToMultiByte
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
GetCurrentProcessId
LoadLibraryExA
CompareStringW

secur32

GetUserNameExW

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ