3d70a9f29a27c9422e3c95a5edf7a92f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d70a9f29a27c9422e3c95a5edf7a92f_JaffaCakes118
Size

44KB
MD5

3d70a9f29a27c9422e3c95a5edf7a92f
SHA1

bdc77f5e2497e6d1d6833f84d8d8f79c4b14deed
SHA256

bec9ab9fed8d3c50b46de66a7d86ef7f262a0e8c18e13b1801e5ddf1d57bf23c
SHA512

2aa17cc4bd1606c2bcd0c532907564f1b5a7349ed09661d37e532606a2c9457e66c2e54f7c211f28547f979de96b387d44ce2e07aa37170e77551d3f2641e16f
SSDEEP

768:q/mJ4LAe0j1iSUwNv0fgToLap3iglktQk8a89LVgqMKpD:qBATjnNuEpyglw5gVj5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d70a9f29a27c9422e3c95a5edf7a92f_JaffaCakes118

Files

3d70a9f29a27c9422e3c95a5edf7a92f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0a70028c1c8527eb70197d339e8dc4cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetCurrentProcessId
GetTickCount
SetLastError
FreeLibrary
VirtualAlloc
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
LoadLibraryW

atl

AtlMarshalPtrInProc

ntdll

NtAddAtom

Sections

.textbss
Size: - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE