ae2a48a8f3d7d2007ffd029f96f413b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae2a48a8f3d7d2007ffd029f96f413b3_JaffaCakes118
Size

46KB
MD5

ae2a48a8f3d7d2007ffd029f96f413b3
SHA1

36fc93008a80e4c6cc4b843a1c9a3fb81cbf5ff0
SHA256

3294517d2cae15319ef219404528c4e2f77ebd9474e0e342799c6be78aef9cdc
SHA512

cd0de6ecc09d7a0db16b2b097fd3c7f69b47837f12d1c2dbc150ad6da1536e96768dd343e2640938245f643684d6b0711908546b7d66f85b0a5d38102446ec8a
SSDEEP

768:XgWPt3LXbGst2Md9ylxGPzZYjjq75ZKGjrEmtIeHca3j1ERCM+TF2pbVx+EkSn2I:XgWPlLLfsuYuzZYjjOrE+1Hca3DBkBct

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae2a48a8f3d7d2007ffd029f96f413b3_JaffaCakes118

Files

ae2a48a8f3d7d2007ffd029f96f413b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db4ebe2831ccb36229fa6046885f1eea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtAddAtom

kernel32

GetProcAddress
GetCurrentProcessId
FreeLibrary
GetCurrentThreadId
GetModuleHandleA
GetTickCount
DisableThreadLibraryCalls
LoadLibraryW
VirtualAlloc
GetSystemTimeAsFileTime
SetLastError

atl

AtlMarshalPtrInProc

Sections

.textbss
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ