3cad6b3244b6bc91abd9e8325ecbf880_JaffaCakes118 | Triage

Sharing

General

Target

3cad6b3244b6bc91abd9e8325ecbf880_JaffaCakes118
Size

156KB
MD5

3cad6b3244b6bc91abd9e8325ecbf880
SHA1

50d222a3de78fb2b29191d36b9e6cf833a7a54b5
SHA256

0cb215d985f6b30a4d12d0b89ee5b4c6ffdcae8c968552ff5765b0fbbf97f84b
SHA512

1a0dafd5ec18ddb3a96d0f5faed5371aa9154a82c1b746af6e8f438d0f394e93ceb07c491ffe7f3c32520ec327681f24543065d77544fc56446f72b91e811d64
SSDEEP

1536:hyKOHTrJfDstWHOs1JWpX9VsRvGpqzU8ksmzXOMqgxnu360ngkg8qxJneB:hz+3pDEqOC+XTswqk/zFqgxnqWRP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cad6b3244b6bc91abd9e8325ecbf880_JaffaCakes118

Files

3cad6b3244b6bc91abd9e8325ecbf880_JaffaCakes118
.dll windows:5 windows x86 arch:x86

0d06a42d191b5673bb2e20d4d16be629

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

memset
free
_adjust_fdiv
malloc
_initterm

ole32

CoTaskMemFree

kernel32

SetFilePointer
GetVersionExW
FlushInstructionCache
GetCurrentDirectoryW
GetFileType
LockResource
lstrcmpA
GetLastError
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
FreeLibrary
DeleteFileW

user32

CascadeWindows

Exports

Exports

Me45bftbfur
QWCwrevtrytrs
qwVrrynut4

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ