d3d5cf348bc8a1e4a22e3913df85ca87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3d5cf348bc8a1e4a22e3913df85ca87_JaffaCakes118
Size

15KB
MD5

d3d5cf348bc8a1e4a22e3913df85ca87
SHA1

3b1518e4257c96fabc2b4e374c3139a5d1ff6662
SHA256

c393b04a4680b826e53ac811a35319f6321479dcf1ddabf8d08d90cb2f63d4d2
SHA512

d2b985f24b702b2a05a9161d3bc913758871db2e7d3e29ce41751e0de9fd9b1c6d13e2e55dc32a141b8bdd627efc4131693deedb5ce258f9362eeeb4073f3733
SSDEEP

384:GMn8ltNbiOYCA6aQJSh8dpryBmVP3nGeD:LnebqUTwoyBmVd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3d5cf348bc8a1e4a22e3913df85ca87_JaffaCakes118

Files

d3d5cf348bc8a1e4a22e3913df85ca87_JaffaCakes118
.exe windows:1 windows x86 arch:x86

477aa1f041b6070cfa89282c9d5c3cf5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetThreadLocale
GetTimeFormatA
GlobalFix
Heap32Next
HeapCompact
GetVersion

msvcrt

memcmp
wcsspn
cos
wctomb
wcstol
wscanf
strspn

Sections

.text
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE