3bf0150ef73f2c878e96f7b64f4f6b46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bf0150ef73f2c878e96f7b64f4f6b46_JaffaCakes118
Size

421KB
MD5

3bf0150ef73f2c878e96f7b64f4f6b46
SHA1

4d95bf10c75563e8300d2c5ef112da2cf7cf3ad6
SHA256

2276acfd91b94151506ef6b0e1b7d54d628e7a985ff92e3dc202bc423b2b0187
SHA512

6ecfe4aba2872254b48c956f45ac175b1f57451dba14a7ecd5376f8db9b769c0a8ce95241956487c63b254fb38349a4bb51ce34b6e5ca59379470fe6f9014a42
SSDEEP

3072:bDFQzGUs0+Q50QTsCz4jI/lMj5f3JDxVerO9ebJ:bG6M34jelMj5f3JDxVerO9ebJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bf0150ef73f2c878e96f7b64f4f6b46_JaffaCakes118

Files

3bf0150ef73f2c878e96f7b64f4f6b46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6d9df426b8952a1015cf7683bc7baba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_acmdln
__set_app_type
_except_handler3
_controlfp
exit
_XcptFilter
_exit
??2@YAPAXI@Z
time
srand
rand
_snprintf
__p__fmode

kernel32

GetStartupInfoA
CreateThread
WaitForSingleObject
GetModuleFileNameA
CreateFileA
WriteFile
CloseHandle
GetCurrentDirectoryA
SetCurrentDirectoryA
GetModuleHandleA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 826B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE