3ab55d9c5a6d15fffb9f71088baf4311_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ab55d9c5a6d15fffb9f71088baf4311_JaffaCakes118
Size

3.4MB
MD5

3ab55d9c5a6d15fffb9f71088baf4311
SHA1

571d073aece7629307d50be9f6e63a1a49fd7137
SHA256

0630c5ea2435175b8716f834657b433c878e75762aefc6561c68134251280265
SHA512

850a1b2a2d29f457b70233a05d93d37b3686d260936c447b43a9a6e02621412e77c4abe84a50f445aeac681d6bef1169a9c4ce1202cdeac4c981b4599c63ca80
SSDEEP

49152:IMcbQzu5yeMcDOxcjYnPpgavwNtliRUvtQLhh05khIQOFMl:IbbQzu5yeNNjyPSavwjliR25khIYl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ab55d9c5a6d15fffb9f71088baf4311_JaffaCakes118

Files

3ab55d9c5a6d15fffb9f71088baf4311_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ecb9c3dc060ca321f126d414163f9252

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
GetACP
InterlockedCompareExchange
LoadLibraryA
GetCommandLineA
FormatMessageA
GetTickCount
GetStartupInfoA
InterlockedExchange
lstrlenW
GetCurrentThreadId
GetFileAttributesA
lstrlenA
LocalAlloc
HeapCreate
EnterCriticalSection
GetStdHandle
TerminateProcess
GetCurrentProcess
GetLastError

Sections

.text
Size: 742KB - Virtual size: 741KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 606B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 394KB - Virtual size: 393KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ