3fe39b7013a2dd6c7dd7f8bc0a290afd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fe39b7013a2dd6c7dd7f8bc0a290afd_JaffaCakes118
Size

56KB
MD5

3fe39b7013a2dd6c7dd7f8bc0a290afd
SHA1

edc528cea31df334e96f95962e6e94236a9b432f
SHA256

a0d7884e62c233781389c82b0032216a317092bd5e61a5a5e3243020a7cd360a
SHA512

81657dc9c75852f634958352d0970af99503c2432a427d38bbe51d6a3491d5607763af4b8bed745fdc1e96a8192fa1c32033ce3bb3b959116ebe968a50f5fe3a
SSDEEP

1536:T6/eSwZri5dqhyL/8ApSAwhHU7W1HCR6oh:W/R+hyLHU0WRCRd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fe39b7013a2dd6c7dd7f8bc0a290afd_JaffaCakes118

Files

3fe39b7013a2dd6c7dd7f8bc0a290afd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad91e4c3cf699dda1581d1fbb3a06501

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpungeConsoleCommandHistoryA
OpenFile
GetTempPathW
SetThreadIdealProcessor
PrepareTape
EnumUILanguagesW
GetTempPathA
lstrcat
TlsAlloc
EnumSystemCodePagesA
SetThreadLocale
CreateFileMappingW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE