3cd30f3f5105c10e19c99cb83dd9fef9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cd30f3f5105c10e19c99cb83dd9fef9_JaffaCakes118
Size

67KB
MD5

3cd30f3f5105c10e19c99cb83dd9fef9
SHA1

97f5b044cb1a0ba45cb9787f738a2ae1b423736d
SHA256

e6e8a7dc2836ab56d9d7287c21655e825013049ffdcf46ac673029a4e4db0e53
SHA512

9be40e8e11c3ee6a75fd52e6f68c732d22b6b3a8cb9dcca2525c719ffaac39e871a62b8c23c8f8952ccf0d68f7443edb1a1ccbbf36943ca456d5a7e0c572e509
SSDEEP

1536:iIlxJuG5yed4WCmNQuWj8X8F3tCLWud4:zxJuydc+QuWwX8rCLbd4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cd30f3f5105c10e19c99cb83dd9fef9_JaffaCakes118

Files

3cd30f3f5105c10e19c99cb83dd9fef9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8eaa07a553679d75f57a11e99df14108

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
SetFileAttributesA
GetCurrentThreadId
GetCommandLineA
GetModuleHandleA
GetProfileStringW
GetStartupInfoA

ole32

CoInitialize
CoCreateInstance
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree

msvcr71

_ismbblead
_controlfp
_onexit
__dllonexit
time
memmove
strchr
atoi
wcslen
exit
realloc
free
_except_handler3
_c_exit
_exit
_XcptFilter
malloc
_cexit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 267KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ