3eda27db1c2c42f813837cf5b470b35c_JaffaCakes118 | Triage

Sharing

General

Target

3eda27db1c2c42f813837cf5b470b35c_JaffaCakes118
Size

15KB
MD5

3eda27db1c2c42f813837cf5b470b35c
SHA1

b38447fa79db128deb0ca23a7bb998b262450561
SHA256

dc2f2eeb5b379c9adff17b2510bc02f8ea365ccd92cf98881dd3c60867c88418
SHA512

509ce6cfd74a51a37e261000c2ddb40f20e8ec1032d9b95aac00452cb7bf0baa4109a07d1a53dd6a28e007fd9373eacef7ccfa1f13cfd0461631c9abb8335c1c
SSDEEP

384:BNE0B5cx1bLlHRbltc51/qPHdG8BPk7c:DRCbLlMg9G8BPk7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eda27db1c2c42f813837cf5b470b35c_JaffaCakes118

Files

3eda27db1c2c42f813837cf5b470b35c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

31232a61db8a4f54b5adcee3749b8709

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetExitCodeThread
WaitForSingleObject
GetProcAddress
GetModuleHandleA
SetLastError
CreateProcessA
GetCurrentProcessId
SleepEx
GetLastError
FindFirstFileA
FindClose
GetVersionExA
GetEnvironmentVariableA
Sleep
LoadLibraryA
CreateFileA
WriteFile
DeleteFileA
lstrcpynA
GetStartupInfoA

msvcrt

_snprintf
strcpy
calloc
malloc
_pctype
strcmp
__mb_cur_max
strchr
printf
atoi
free
_vsnprintf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset
strncpy
strstr
strlen
_isctype
_stricmp

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE