3ab1effe13e9b5c12d438431c262d143_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ab1effe13e9b5c12d438431c262d143_JaffaCakes118
Size

16KB
MD5

3ab1effe13e9b5c12d438431c262d143
SHA1

6852e3c997eb576c5d5ad493e579fbceb95e1f8a
SHA256

b1042c977f1f2b97876d17205e10d84c83194e6a92e6be59a0f3910ee4706d5b
SHA512

8e9886623a6325fefa1c29b3c5a421a32fe18a8d22531320db1ae43b9006080a8a8dcf82a8d8eaee85bfc522b8a514a1e4c788418f38c092f259fce5b0d8c622
SSDEEP

384:/P69ri/NNHzYosjer0YhwLoyRxEl1BRCHASahP:neSzYWV2ElPww

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ab1effe13e9b5c12d438431c262d143_JaffaCakes118

Files

3ab1effe13e9b5c12d438431c262d143_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db277f0791c951abbedd687d9de0fc32

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter

user32

MessageBoxA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 627B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ