b3528c34777a5cea9afe8099bde3bae3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3528c34777a5cea9afe8099bde3bae3_JaffaCakes118
Size

8KB
MD5

b3528c34777a5cea9afe8099bde3bae3
SHA1

894800279f476dd8b6110ff1d451e75a60ae5773
SHA256

699326bc35e19e3e35d3a0297177409e4f5932b6346fd64ec6aa6c2a323bc90a
SHA512

358fd7c35e9eb35d48e266cb380ea6cfa361042ad156aa79cd997ba5dd22b1baa94800924942cb1631ce94a895964832465fd63433d93083455efcf58a297e02
SSDEEP

192:c719eOsq7BMk1m+WFLIh3se48Y81nHIDEhO:uTqqFtWF8h9TbM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3528c34777a5cea9afe8099bde3bae3_JaffaCakes118

Files

b3528c34777a5cea9afe8099bde3bae3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

72ceb0cbf6000bfc508ffa5a3a2f917b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_cexit
__p__fmode
__set_app_type
_controlfp
_except_handler3
_XcptFilter
_exit
__p__commode
_c_exit

kernel32

GetModuleHandleA
MultiByteToWideChar
GetStartupInfoA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE