3cec06fe2a78fef09f4d93d1c016f54b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cec06fe2a78fef09f4d93d1c016f54b_JaffaCakes118
Size

31KB
MD5

3cec06fe2a78fef09f4d93d1c016f54b
SHA1

8ef4d8e1f49c125d31029f29e41735bc08a331f6
SHA256

4a32f4ce65ea08f27ba2551effff655f3949de0e32dbdfda6dd2f5bedf1a091d
SHA512

a04828e6cc559fe5b58c31e8c0a656bdcefe289349856daca28206bac45ec4793f95b11fec27560300b015e2f4517e8d4dfa734b7d8e4236d7fd5d0e710b80e9
SSDEEP

768:zASwN9rQvesytNCMxV8qdq7CrXM744PXPA3bqdPEC+nWXnuUN:cSekXytFf/cuO/WqdMTW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cec06fe2a78fef09f4d93d1c016f54b_JaffaCakes118

Files

3cec06fe2a78fef09f4d93d1c016f54b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

49f051ca68a9c2442d45e936bb70411c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_strnicmp
abort
exit
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strncmp
strtol
wcslen
wctomb

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 608B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 784B - Virtual size: 784B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE