3fd5b559f4f278f79bd30a5f40f19bef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fd5b559f4f278f79bd30a5f40f19bef_JaffaCakes118
Size

231KB
MD5

3fd5b559f4f278f79bd30a5f40f19bef
SHA1

560645d85e16409b0f4434ddf68e4bb07c2aa754
SHA256

9f63266b1a5c485d75a36e7ce43b5703cbf885191def1ddf80e3dd924f5a6594
SHA512

86c10d40db041146aae840701811aa5e2cbf3df542c75b815fe34c8700e145286535e48d0d50346dd402e05d9358a937d7f64206ad6abef2d79f59a411f2c8af
SSDEEP

6144:CvPnRHjt09Q7YtWTxm4N0QMeYCI+ujfnY2FF8rVcx8eg:0BSjtN4N0Q1YCI1rnYnVcM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fd5b559f4f278f79bd30a5f40f19bef_JaffaCakes118

Files

3fd5b559f4f278f79bd30a5f40f19bef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51b6a17f651710794b7aa908d65e4b88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCommandLineA
GetSystemInfo
GetLocaleInfoA
MultiByteToWideChar
HeapDestroy
SetUnhandledExceptionFilter
VirtualQuery
GetConsoleCP
UnhandledExceptionFilter
HeapCreate
GetCurrentProcessId
SetHandleCount
EnterCriticalSection
DeleteCriticalSection
FreeEnvironmentStringsA
CreateFileA
GetModuleHandleA
GetStartupInfoA

user32

GetMessageA
DefWindowProcA
GetWindow
GetClientRect

msvcrt

_adjust_fdiv
_onexit
__dllonexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_controlfp
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ