3f94aa8119f6bff9b71fd86d2ec82e99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f94aa8119f6bff9b71fd86d2ec82e99_JaffaCakes118
Size

41KB
MD5

3f94aa8119f6bff9b71fd86d2ec82e99
SHA1

9b2f59cf3177f5a20a9355d37d6f55bd96a6c4f3
SHA256

4293a8f8af010382064d8c249a3dd6eff39c333e673035d7c2f0a71ada77e5c7
SHA512

196bb50ff9427771b3964559a0245225bf341d180a3ecd39193483322ec21f2574978415695849d9b8bdc1de541d6f94d5889cc4cae8957540a5544ecb75a09c
SSDEEP

768:R65raxGmXJRZNUzvJw+QN2esPAtSKndJfT8GXpQcda58fUN1K:ROuZJRZyQ2ex7L8UpQxifUN1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f94aa8119f6bff9b71fd86d2ec82e99_JaffaCakes118

Files

3f94aa8119f6bff9b71fd86d2ec82e99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

65804a6528d825ea1743f607c4e44696

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strstr
strcpy
strlen
memcmp
??2@YAPAXI@Z
memset

kernel32

CreateFileA
VirtualAlloc
VirtualFree
CloseHandle
ReadFile
WriteFile

Sections

.text
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE