3d431626f768c63eac7bdac7570450f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d431626f768c63eac7bdac7570450f2_JaffaCakes118
Size

41KB
MD5

3d431626f768c63eac7bdac7570450f2
SHA1

06ffdbfb79da5b94485895736b9dca99a8020037
SHA256

ef9a2a840e3746b1a9953f62b76c2a51d97f9f515e08e2387f53788aef4153ff
SHA512

5994dd04d5b2ebbfc373bdfc4102ee480e3a236f68b389ad3716b281abb00cc40fa4ab7f1f3beac3ca7e3fed3b8e34d50c27748f1e6d44a0acc6aa47398f5f47
SSDEEP

768:3/mJ4LAe0j1iSUwNv0fgToLap3iglktQk8a89LVg:3BATjnNuEpyglw5gV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d431626f768c63eac7bdac7570450f2_JaffaCakes118

Files

3d431626f768c63eac7bdac7570450f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0a70028c1c8527eb70197d339e8dc4cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetCurrentProcessId
GetTickCount
SetLastError
FreeLibrary
VirtualAlloc
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
LoadLibraryW

atl

AtlMarshalPtrInProc

ntdll

NtAddAtom

Sections

.textbss
Size: - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE