3eb54e38d1c6657f20326e96b6b77bf9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3eb54e38d1c6657f20326e96b6b77bf9_JaffaCakes118
Size

67KB
MD5

3eb54e38d1c6657f20326e96b6b77bf9
SHA1

5aa23f0214ac5eb0ab94ac7699f007cb890a516f
SHA256

aa96445961a36dd293427078eeea0f5f558671f762359d41118d341f63b2e75d
SHA512

399f9d4aaefbfb71e2deb865909317cea87b05b5e6f0bbfc36e682b66d75d61cff6379050f2027c74e3f5da4dab8548510729276ad2360e635299205ffb3b287
SSDEEP

1536:UZpmL2aYxcSZ0a8alQTfCEDWY8n/dZuy0setPzE:RL2aYT05TfC2W3fuy0p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eb54e38d1c6657f20326e96b6b77bf9_JaffaCakes118

Files

3eb54e38d1c6657f20326e96b6b77bf9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acd8a64ada1a41b9dfed1dba8d0ac1b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
SetLocalTime
GetLocalTime
FoldStringA
AddLocalAlternateComputerNameW
CreateNamedPipeA
SetConsolePalette
SetConsolePalette
GetProfileStringA
AreFileApisANSI
FindClose

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE