3aadbbe7ab79ef2c77332fffc87949e6_JaffaCakes118 | Triage

Sharing

General

Target

3aadbbe7ab79ef2c77332fffc87949e6_JaffaCakes118
Size

170KB
MD5

3aadbbe7ab79ef2c77332fffc87949e6
SHA1

7c8ccecee52c7b88df32377c1959e45db9294f43
SHA256

1a4d81ad95e74a5520c827e76ad9ae4b9d8f46c5f89d607c1528a66440c97566
SHA512

3e1f03f793d1dd2e901e8799fbd99815cebf29f575a31de55f29f10690975759c5bbe82ba2bdb529989049b9a95ca9c205541695b21ab95069ff8376a769bf2f
SSDEEP

3072:FqJs5o9R33cZafOu5q7bpwam31h06T4ysjGEgzd90owi6q:FKp736u5+bpY3Q6TpsaEgzv046

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3aadbbe7ab79ef2c77332fffc87949e6_JaffaCakes118

Files

3aadbbe7ab79ef2c77332fffc87949e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7edc40748865ce97d85e816e431ff648

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GetCommandLineA
GetModuleHandleA
GetProcAddress
lstrlenW
IsBadReadPtr
VirtualAlloc
IsBadHugeReadPtr
ExitProcess
GetCommandLineW
ExitThread
lstrlenA

Sections

CODE
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 422B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ