3d94525a13bc1e03cb12181d6f8afa59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d94525a13bc1e03cb12181d6f8afa59_JaffaCakes118
Size

73KB
MD5

3d94525a13bc1e03cb12181d6f8afa59
SHA1

5f336720af3991391e4237199ae251fa5ade7988
SHA256

a987ede9bba7c8923002ecbde9895d26563f54f30b5e485c2ae156b945ae19a3
SHA512

aa3c704b2db559f9db9e5b4df97d9f793b26eb579d6dd58ac48da625c88b0679bb9501ad161758654c0c871174ce6778474aee781bddf70ca04f2fa00fe2b2d1
SSDEEP

1536:ibioQnl0MaGgRnBf6ezG2Phnla1CHdCn1CHWeDjoR3U6TQ:iWJl0bGOke62Bla1CHw1CHdDUR3Ub

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d94525a13bc1e03cb12181d6f8afa59_JaffaCakes118

Files

3d94525a13bc1e03cb12181d6f8afa59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61597ffc3eb9f12ccff061cc20a15ea9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessId
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
VirtualProtect

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ