3694ff0f3e830c25ac5bfa115b3e39f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3694ff0f3e830c25ac5bfa115b3e39f6_JaffaCakes118
Size

118KB
MD5

3694ff0f3e830c25ac5bfa115b3e39f6
SHA1

892a619320885e1d2e1223e791a7c3106727f9bc
SHA256

41dc59ea3207441a13d70fa97a6a1732a5e6bcd7b1413d904c33a89c587eb738
SHA512

1cba517db1aa070b952d4189c562963a3c0626938bd370bbb46bb321e94398ca59a8bba3f2efb72bac6fe7534da6c9ceb9ad079341e8ee3beb97badf58c496ac
SSDEEP

3072:MVEu5e2D6Ox9+QUbazKfkoxa6OvOcEateEaWnf:g5e2+KoQU+zKMoBOvOcXWo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3694ff0f3e830c25ac5bfa115b3e39f6_JaffaCakes118

Files

3694ff0f3e830c25ac5bfa115b3e39f6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3ee42e6acdba52d2b5611a277454ff96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
GetCommandLineW
ExpandEnvironmentStringsA
GetStringTypeW
GlobalHandle
GetProcAddress
FormatMessageA
GetProcessHeap
GetCurrentDirectoryA
GetVersionExA
lstrlenW
VirtualProtectEx
SystemTimeToFileTime
GetModuleHandleW

msvcrt

_adjust_fdiv
_exit
__p__commode
__set_app_type
_initterm
_except_handler3
__setusermatherr
__getmainargs
_controlfp
calloc
__p__fmode
__p___initenv
free
_XcptFilter

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ