3008286dca3308be65226621af2bdb73_JaffaCakes118 | Triage

Sharing

General

Target

3008286dca3308be65226621af2bdb73_JaffaCakes118
Size

130KB
MD5

3008286dca3308be65226621af2bdb73
SHA1

3b6c9a96d8c63798d4b7ea4444799c4fc45dec0d
SHA256

eee6174086e6cb59912ae6829403f1efac47adcba1e725d4a740d45ef8552245
SHA512

2f0ab5347e0745d723c9af7ccd6eb4bbf61726ef4601dd417198b1ce3d450f95bd68d5797a07d53d1783a2ca33972ed72611173a7371b6034353f09faef7642d
SSDEEP

3072:LIjBCk/Ptng+DzTFXtC71zDuO+gW4ji6cnEHvSz:LIf/PhDdXtinuOVWkcnEHO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3008286dca3308be65226621af2bdb73_JaffaCakes118

Files

3008286dca3308be65226621af2bdb73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ae6395717bd7253949a4b883302f79a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
GetProcessHeap
GetModuleHandleW
GetSystemTimeAsFileTime
GetLastError
GetPrivateProfileStringA
VirtualProtectEx
VirtualProtect
GetConsoleOutputCP
SetThreadLocale
GlobalReAlloc
LCMapStringA
GlobalLock
GlobalHandle
lstrcatA
LocalFree
GetFullPathNameA
lstrcmpiA
DeleteFileA

msvcrt

_controlfp
__p__fmode
atan2
_except_handler3
free
__setusermatherr
__p__commode
_XcptFilter
_adjust_fdiv
__p___initenv
__set_app_type
_initterm
_exit
calloc

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ