b3ff05d738faa79bac03563a1a789a81_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3ff05d738faa79bac03563a1a789a81_JaffaCakes118
Size

297KB
MD5

b3ff05d738faa79bac03563a1a789a81
SHA1

e3b70f5b5dbed97297f0c2840026b61a16cfbe19
SHA256

d5f34c4c7de82b8afc80ed688f6625be722e92d0f80aa39470e93c78f183982b
SHA512

19dd7d1e6930f449bb73998b49b66c0ddbafcd59e81c5975c91c4e5a918a18f47eca300861e7b4c9308e62ed5f49e0e97a898b1ecdbec3355a65e503e1734753
SSDEEP

6144:yn54iI2CIheExQqA5QngoKtYx0DwJ2Cpw:yGJlcgJYxkCp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3ff05d738faa79bac03563a1a789a81_JaffaCakes118

Files

b3ff05d738faa79bac03563a1a789a81_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3630ba92841e05ed700f079eb099be44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
CloseHandle
GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
HeapFree
HeapReAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ