a3958060db228ee926e67fd07846b68f_JaffaCakes118 | Triage

Sharing

General

Target

a3958060db228ee926e67fd07846b68f_JaffaCakes118
Size

304KB
MD5

a3958060db228ee926e67fd07846b68f
SHA1

e32b4acc190b02d1deb7292f8dd623b6cf565ee0
SHA256

84174b8b948218f50926dfcb1c67966889d88eb4b97634a773f3a9c20b7e1500
SHA512

60897a32c5d8cc38d087e9e0b25d0b1c0a07ec91ebabac5e19075f81d0e55f470d4b42107c4b9a8047ce04dfe6b2b5fed960d83460e6707f2ff6abf45ba1a0c1
SSDEEP

6144:1LPEyD5hPrdX4KwFymM+GEneL5Ow1+r7538OhEHe0d/xMcdy3qjQ0Q:1zEyhPN4PFyCGLzm7WOhOlxMcIq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3958060db228ee926e67fd07846b68f_JaffaCakes118

Files

a3958060db228ee926e67fd07846b68f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

737159d59d1ae36568eecbe7e45dd52d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
GetModuleHandleW
HeapReAlloc
GetModuleFileNameA
GetCommandLineA
GetThreadLocale
ExitProcess
UnhandledExceptionFilter
GetCommandLineW
LockResource
LoadResource
InitializeCriticalSection
TlsFree
HeapFree
GetLastError
VirtualAlloc
GetStartupInfoA
GetModuleHandleA

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
_strcmpi

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 296KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE