3f992ac01825ba4d0e11f317def8ba62_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f992ac01825ba4d0e11f317def8ba62_JaffaCakes118
Size

98KB
MD5

3f992ac01825ba4d0e11f317def8ba62
SHA1

ab2cebeb2f816caf181040ac8b427b533cf027c5
SHA256

b1c135557cedeecbc1906ef102534dcaac40f6aa5e8a13eefc92f38b18446fd8
SHA512

783c6047e05dc8484f1bf437e5589336549688de8fb74bc7fc055986aaa980a37f0690ff0548cb1e33681dd38fea621d850eef80c584f3170113decd49d1c38b
SSDEEP

1536:MYzJs8wU0hQSBpg8zRswfSDALc0u1SkET4QUEshhCJQiYmj:MYzJsm0hQS1f4ALc0u1SkET4rhhJQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f992ac01825ba4d0e11f317def8ba62_JaffaCakes118

Files

3f992ac01825ba4d0e11f317def8ba62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8838a4a1d31fba487467c7a667177b49

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

msvcrt

strcpy
calloc
strlen
fclose
fwrite
fopen
malloc
strcat
memcpy
strcmp
memset
free
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit

Sections

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ