3cee280827e758d8bb7ce5cf9c4951b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cee280827e758d8bb7ce5cf9c4951b4_JaffaCakes118
Size

56KB
MD5

3cee280827e758d8bb7ce5cf9c4951b4
SHA1

fb9fa3e1da6b1f56db1416ceb04a4f9cc8977c99
SHA256

5bde3a1030b0d9f9d3a75e85da62ec904138fe22a1a7a2406d85d9c429b16ec6
SHA512

a3820b76bc9d948ab275d1ccd9044b6a5dcd81e76235ab22bbf6abfd791fe28a61bfa8b7e5a42c07b64c546309537f93fc0c04ec54fbf61f2efec22df95183a6
SSDEEP

768:dad8sqQV0lPi4Vka59OK5xiTTxaEv4MkMTxyHVXo9lVq8yq:o8QyPi4WaqKqTT5tkMTghop9y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cee280827e758d8bb7ce5cf9c4951b4_JaffaCakes118

Files

3cee280827e758d8bb7ce5cf9c4951b4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

bc620fe4873540cf731d36c22c020368

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
VirtualAlloc
lstrcmpiA
GetProcAddress
LoadLibraryA
GetLastError
GetSystemTimeAsFileTime
GetStringTypeW
GetStringTypeA
LCMapStringW
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
HeapFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
RtlUnwind

user32

GetSystemMetrics

Exports

Exports

AlcoTst
satDoc
satGen
satInit
satOnstant
satTion1
satTion2
satleDoc
satrateDoc

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ