b3288a1919f7e4ddea98d1babbdec587_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3288a1919f7e4ddea98d1babbdec587_JaffaCakes118
Size

168KB
MD5

b3288a1919f7e4ddea98d1babbdec587
SHA1

dbbd932b04f7ef90ae3ab2e41a8205888cd4fade
SHA256

48c17ab69c48d225bbbee62b242fd7bc5c7c076c690d19999fbcfc8e1d9608e6
SHA512

9a7377d8b8a13dc3f29255288f40defce57099cc4d79a8f7f1539e1d5b93b9d2d10c36bb66aa5fc387475ba1dc854272518ae56a603c8f0ce1ab5472eb9ae88f
SSDEEP

3072:WMdARvU4PkgKsvD2pjkiYUYy7tZg6wVvlZ7UQnNDBu65cquQFjSGZr3k:Ndl4kbsvD2pvYUYy7c64ltHBuepukDr0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3288a1919f7e4ddea98d1babbdec587_JaffaCakes118

Files

b3288a1919f7e4ddea98d1babbdec587_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4f91e4a256c607fc5731fb36da2dadf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
GetStartupInfoA

user32

CloseWindow
SetWindowPos

msvcrt

_adjust_fdiv
strcmp
??3@YAXPAX@Z
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_initterm
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ