3fe2df541a00c790e67d1ded3f85d17c_JaffaCakes118 | Triage

Sharing

General

Target

3fe2df541a00c790e67d1ded3f85d17c_JaffaCakes118
Size

83KB
MD5

3fe2df541a00c790e67d1ded3f85d17c
SHA1

363504220dee4b755a66bd29eaf4b6784a8f9c60
SHA256

6a58a80c95974a1f9a621ce7b27f5ec9ddd6ee648d329fc7f1e9dfaae103ef4b
SHA512

975a4f61e3dcfe93f45a3f586a08423af720f876a2bed1b2d3dbe8977ece08de09293ff8d522f143218599fee7b917b9d19787697e9af56ddd01bf5cb7503e39
SSDEEP

1536:0TsUrWrWS8Ba45bVMDJa4oFXnEx7cU3CITksgEqO6s9gHHtHDHHuJDrguMrnhMhU:JhxNgCC+rbPUJ7hvtHs2qm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fe2df541a00c790e67d1ded3f85d17c_JaffaCakes118

Files

3fe2df541a00c790e67d1ded3f85d17c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

994e10a101d566ba085e1bb1dad5ae2e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTapeStatus
WaitCommEvent
GetFullPathNameA
SetConsoleCursorMode
GetModuleHandleExW
Process32FirstW
CheckRemoteDebuggerPresent
PulseEvent
SetEndOfFile
FindNextVolumeMountPointA
VirtualBufferExceptionHandler

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE