3cf2b1d617eaec5bad2483fd1d211713_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cf2b1d617eaec5bad2483fd1d211713_JaffaCakes118
Size

83KB
MD5

3cf2b1d617eaec5bad2483fd1d211713
SHA1

0cc5280fe84ca8351fb7064b2f3d4038555be13e
SHA256

41705e40ffc601962364206cd168700e14c5c43cdc20fee44c56348a78bb1a78
SHA512

2d4e6cd02741bc0a45222cc4bafc936437ce1d5673ed7df5151f4c85cd44f3645c473f44d3292a6b0719ef5a2ccff903e50398aa603ddb7208c18afdd6441c75
SSDEEP

1536:flRKBpRvIbmhmln3YC5nFEt7haHHz77nsU2pxjEErxTWDTMqhGKYIZTET8bDQ:fDQp+Sn+FK4z7zsLTjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cf2b1d617eaec5bad2483fd1d211713_JaffaCakes118

Files

3cf2b1d617eaec5bad2483fd1d211713_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bafe9fd840a39f436193106587445fdd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
CreateThread
BackupSeek
FindResourceExW
BindIoCompletionCallback
SetDllDirectoryA
SetFileShortNameA
SetProcessAffinityMask
SetThreadUILanguage
GetTickCount
GetCurrencyFormatA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE