3cfd8e0005d9fef1be088648b464767b_JaffaCakes118 | Triage

Sharing

General

Target

3cfd8e0005d9fef1be088648b464767b_JaffaCakes118
Size

72KB
MD5

3cfd8e0005d9fef1be088648b464767b
SHA1

f5e0d170c11b7d558f53f9a8d8abef0d6733df12
SHA256

c115f3fe59e3cbba472aa47836c861a5893da8c60959d111ad8c0c2edaeff5cf
SHA512

457ca36a63354748bbcb858d19a1e8b88cd71377ca246c47a9f092e3de3a377f7a72ea46a2621d368d85b1619b97bed16ff48dba7e5a9a3f4d858557e25603e0
SSDEEP

768:7kgYpNuvWWWI8lSMZuvWWwLPjy3jHJZ5ziLmh6Dm1T8:7WpA5AP5mx8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cfd8e0005d9fef1be088648b464767b_JaffaCakes118

Files

3cfd8e0005d9fef1be088648b464767b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b34ad0756c916f3baa7842e9d155f41c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CopyFileA
ExitProcess
FindAtomA
GetAtomNameA
GetWindowsDirectoryA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
atof
atoi
fclose
fflush
fopen
fprintf
fread
free
fseek
ftell
fwrite
gets
malloc
memcpy
memset
printf
rewind
scanf
signal
sprintf
strcmp
strlen
toupper

shell32

ShellExecuteA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 192B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE