3e764571c29bd2d501477f7101c906ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e764571c29bd2d501477f7101c906ce_JaffaCakes118
Size

193KB
MD5

3e764571c29bd2d501477f7101c906ce
SHA1

c59b24fe457074daba910fafbda6b6d486b3140a
SHA256

75a23fc780906d6ea21e86f0af02598d1a7f04acc1dcf2a0922170accbadf5ce
SHA512

45ff4f0692c4c7f4fdda70da166b70cdd458691b31415c67a8dda925c866f535e9e328e4f1532d009169528acaf8bbcfd4eeb9c3dc262d588ee36d6017327de7
SSDEEP

3072:vAgx8rn4HaOQ7BaCvaBPmLgIkUXZhiEpsRB:vAgxESaOO8lygIthi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e764571c29bd2d501477f7101c906ce_JaffaCakes118

Files

3e764571c29bd2d501477f7101c906ce_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a650a30dbc4c41c9bfe1d3ba7bab492a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_adjust_fdiv
log
_acmdln
__setusermatherr
__p__fmode
_XcptFilter
_initterm
__set_app_type
__p__commode
_except_handler3
exit
__getmainargs

kernel32

GetStartupInfoA
GetModuleHandleA
VirtualProtect

user32

FindWindowA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ