3b70ca7f013dc17656094a79f81d5fee_JaffaCakes118 | Triage

Sharing

General

Target

3b70ca7f013dc17656094a79f81d5fee_JaffaCakes118
Size

64KB
MD5

3b70ca7f013dc17656094a79f81d5fee
SHA1

830a24e763d612bd7d2b15f042479095ce3b8e6b
SHA256

66f676c63a1dd445adbcf11015df5cdd2f3e37116de8946b73cc1bc02f083a2f
SHA512

74eab55daaf61d9e705f6fa641128f12cbcc6d363e367a96c5347e5f925b1513266d8325cfb7dbb69d66d6f473fabbe437e7c21979d0eaa204a2efb1441c76e6
SSDEEP

768:bY57+tTC3QRbj0nSXbSy1Vy8dJ1EnAQq0oZORSMlctc0HjLPuLf:b66t5RbkCb5JJ1CmZORSPc0HjLmLf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b70ca7f013dc17656094a79f81d5fee_JaffaCakes118

Files

3b70ca7f013dc17656094a79f81d5fee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d500a089a47a57866dfaffcefa42dfc5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
GetLastError
GetConsoleTitleA
SetLastError

user32

MessageBoxA

msvcrt

_controlfp
strcat
strcpy
strlen
strstr
remove
printf
malloc
sscanf
free
_errno
calloc
strncpy
exit
getenv
memset
_getpid
sprintf
fflush
_iob
vsprintf
memcmp
atol
_mkdir
_rmdir
_close
_read
_lseek
_open
_write
_stat
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ