3ed1076c56157665b27aad31e2243071_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ed1076c56157665b27aad31e2243071_JaffaCakes118
Size

27KB
MD5

3ed1076c56157665b27aad31e2243071
SHA1

3c1451750b327c074fcb97b90de1a76d1f7f8f9e
SHA256

ff0a6f15481f1a2c3f117c3ca8a89c8f45739184c77d61e9ff543d888e169261
SHA512

07ac38ed82d9ab1cb373c328ae690b298521ea95da65654883efdd121ba8c3ca6c806d919eddd461dd4d335fa6c5591d3110a53a5b8baefc3549ac56c93a2d5e
SSDEEP

768:tWMrZ1IeH04eF67AA6uBH60AQNutxdwm8SjsHfcI:tWKZB04eYOuB6YuXjskI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ed1076c56157665b27aad31e2243071_JaffaCakes118

Files

3ed1076c56157665b27aad31e2243071_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46babafcc7731e60de997d706f7076af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
EnterCriticalSection
TlsSetValue
GetVersionExA
Sleep
GetConsoleMode
TlsAlloc
FormatMessageA
TlsGetValue
GetConsoleCP
CloseHandle
SizeofResource
FreeEnvironmentStringsW
CreateFileMappingA
SetProcessWorkingSetSize

msvcrt

__p__commode
strncmp
fgets
wcsncpy
_itoa

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE