3d4fdb017e2771eb22c36d5ed571bb35_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d4fdb017e2771eb22c36d5ed571bb35_JaffaCakes118
Size

196KB
MD5

3d4fdb017e2771eb22c36d5ed571bb35
SHA1

f5e5515e04cbc31b308bd87a8a69e3a11a72fb65
SHA256

1a171c59fa81378b89c80f7c7cb3e7eb729813b3a17f90c3e8e64c2a49c29b14
SHA512

3e192b268f4cf46348acf8fbb082807e9c12d4f95bb0bd0e12a851071fb9fc218cb443533bbd0ab545c456b6d11bff28b894f78e4961c69f79781a8b6a3364fb
SSDEEP

3072:W3dA/OjHkArT2aJNUFjxbl1ZRXhKFykBGOoOW2CFDJT+MyPuG1qupwIJ:W3u6EALeRRl1ZErGVOJekNgwh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d4fdb017e2771eb22c36d5ed571bb35_JaffaCakes118

Files

3d4fdb017e2771eb22c36d5ed571bb35_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd808abd69967d3b39e3c8d9d4b0be44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
VirtualAlloc
GetLastError
GetCommandLineA
IsBadHugeReadPtr
GetProcAddress
GetCommandLineW
GetModuleHandleA
LoadLibraryExA
GetACP
ExitProcess
lstrlenW

shell32

SHGetDiskFreeSpaceA
SHGetFileInfoA

oleaut32

SafeArrayPtrOfIndex
SysStringLen
GetErrorInfo
SysReAllocStringLen
SafeArrayCreate

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ