3b19438aa1bcbc46f986514aa427d46a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b19438aa1bcbc46f986514aa427d46a_JaffaCakes118
Size

51KB
MD5

3b19438aa1bcbc46f986514aa427d46a
SHA1

529f532dc6e81820d9af883e795ccbe439a5928f
SHA256

7ee818ec52f145e883415bd04197c3530adcb579463d211f5246b7a893a84f1c
SHA512

ff4fe4a120bba113b86c424f5c4f479a87bcbf3f8a4d06a34ecc75ae500a5849d95837860febf12d7111dbf8ba89c2cb0448d61400efe5e89ce7fc8fdd121ad5
SSDEEP

768:CKco+nXS3N3deYLzpYnkHzvX9CMJ4uCUjbzjcpnOW:3R+XS3RdeYnpYnQ91UKb/cpOW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b19438aa1bcbc46f986514aa427d46a_JaffaCakes118

Files

3b19438aa1bcbc46f986514aa427d46a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ff6f03509e3363cec461d3f61abb1529

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
GetStartupInfoW
TlsGetValue
GlobalReAlloc
lstrcatA
GetAtomNameW
GetDateFormatW
CreateProcessW
GetProcAddress
EndUpdateResourceW
GetModuleHandleW

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ