3e50c79de2855cac48a21af58445830b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e50c79de2855cac48a21af58445830b_JaffaCakes118
Size

5KB
MD5

3e50c79de2855cac48a21af58445830b
SHA1

3f540bb7b184ee5964412e22978308896dd8c3d3
SHA256

64547187b903e7df165c48d6712c988839db8efffe42d3f5ab59d3a17fc1aaa1
SHA512

90c5a8f5babbc87a088b1988a7475ba7279f41bcac1fcdeb3f7f4a2869739d27d8248de2d698813ec5f23c0c1c7765f04b4ee201f69e0368ed9eec5bac2fdc89
SSDEEP

96:J+Au/5AWeAyErb9PGvXcq7H+gP4oynCUz5K0s:J+//5KEPEvXcq6gP4oynCUz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e50c79de2855cac48a21af58445830b_JaffaCakes118

Files

3e50c79de2855cac48a21af58445830b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

08c6c6afda2527b8a47741d922302b10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcirt

?cout@@3Vostream_withassign@@A
??6ostream@@QAEAAV0@PBD@Z
?flush@@YAAAVostream@@AAV1@@Z
?cerr@@3Vostream_withassign@@A

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
_splitpath
strchr
printf
sprintf

kernel32

GetConsoleMode
GetStdHandle
CreateMutexA
CreateNamedPipeA
GetCurrentDirectoryA
CreateProcessA
ResumeThread
WaitForSingleObject
Sleep
GetExitCodeProcess
WriteFile
ConnectNamedPipe
ReadFile
TerminateThread
CreateThread
CloseHandle
SetConsoleMode

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE