3b3635332babd7300e618a15df079b27_JaffaCakes118 | Triage

Sharing

General

Target

3b3635332babd7300e618a15df079b27_JaffaCakes118
Size

76KB
MD5

3b3635332babd7300e618a15df079b27
SHA1

4f767ea01ea4472c7e7734a041a8d859bba3b9da
SHA256

e3e720e66122c8f8d83a6f6ad93e5f23f7d6c13e43f433efee3ea4bfc81ad819
SHA512

300088a4e65d506bec0696fe6fbc81fbcf70298a13892fdfdf140cbfcedfa4369e1fb50308e1edee13b9de1c26cca03987352d6f9dee293f9842fe58e24e6d87
SSDEEP

1536:YAB/TWZgmUuELxv/5wO3pLbNJFpjVrs2ryrd1vUQuq6:Y2bWZ4tvJ57FHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b3635332babd7300e618a15df079b27_JaffaCakes118

Files

3b3635332babd7300e618a15df079b27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63577643c5e327897c9e977687ccbdea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
CreateMutexA
SetProcessWorkingSetSize
FileTimeToLocalFileTime
GetSystemRegistryQuota
LocalAlloc
GetStringTypeExW
WriteConsoleOutputCharacterW
FindFirstFileExA
CreateActCtxA
GlobalLock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE