3de5f1261de6ed5975d0781bb821966a_JaffaCakes118 | Triage

Sharing

General

Target

3de5f1261de6ed5975d0781bb821966a_JaffaCakes118
Size

12KB
MD5

3de5f1261de6ed5975d0781bb821966a
SHA1

30ece965e7b53ff09e7748668502bc11904ddd0f
SHA256

a4264af73fac8429b9bcd0768784a5c0fc5467e9528239504afc6f288346c64c
SHA512

71c908ec2142f74be42440cb6b0dd4026f12903999570fd4a2c631371187026ad9f7b52360519f2a2fe01e4a0150914a7e00f11aff9b8d661dcb3833699cfbbe
SSDEEP

192:dYWO4UvnWat5wmL3ZvikIvh9939ke3buHtt1RNKcnPohm91JKyggkgBT:CJxWS5woYbr939kAbuHtt1RxgEJKygp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3de5f1261de6ed5975d0781bb821966a_JaffaCakes118

Files

3de5f1261de6ed5975d0781bb821966a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6d4b4e93e0993ecdea3f43f85991eafe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_cexit
__p__fmode
__set_app_type
_controlfp
_except_handler3
_XcptFilter
_exit
_c_exit
__CxxFrameHandler
__p__commode
memcpy

kernel32

VirtualAlloc
VirtualFree
GetLastError
ExitProcess
GetStartupInfoA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE