3c6b0e87434b00293ed687034c808b9e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c6b0e87434b00293ed687034c808b9e_JaffaCakes118
Size

21KB
MD5

3c6b0e87434b00293ed687034c808b9e
SHA1

775e85d271f20a3d1c8c9cc97c22f94b34194281
SHA256

1eee6ee83943614cc79407d8e9e289a02a6c41fd072acfc5d0c360cab612fc60
SHA512

792c9c6c57bcae174913d156ebab2fd53846a3dd620f7cf7584acf7cddc754a89d7b4fa8860c82f1cf8cb8190264210b41bc2e3e75e3e62292879196bf07c3fd
SSDEEP

384:rAoLtPjcO+YyBNnrZCnqKAhYWuAWRDaKqWF0GeqZEv358/oIpfFDaEdFCY:rAQRjt+DzrWYaLRLLronWhaEdFC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c6b0e87434b00293ed687034c808b9e_JaffaCakes118

Files

3c6b0e87434b00293ed687034c808b9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6b71be0785547249c7affc0528b6ce4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
lstrcatA
GetStartupInfoA
GetFileSize
GetModuleHandleA
lstrcpyA
GlobalAlloc
CloseHandle
lstrlenA
LocalFree
GetVersionExA
GetCommandLineA
GlobalFree
GetTickCount
GetLastError
CreateEventA
Sleep

msvcrt

_acmdln
_controlfp
__setusermatherr
wcstoul
__p__fmode
wcslen
_adjust_fdiv
__getmainargs
_except_handler3
exit

Sections

.text
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 969B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrs
Size: 16KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ