3ededf870b79be025101838e7ae8cf62_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ededf870b79be025101838e7ae8cf62_JaffaCakes118
Size

846KB
MD5

3ededf870b79be025101838e7ae8cf62
SHA1

9342fa64e79b05da4b76272b72da4d9bdf02d893
SHA256

02cd41b344b7b140abdb3952cc8c4dd3252c09deff796d4a952592d123b07de5
SHA512

d1bfbb60bcc12955b722a7fcbba9e36cb429b6828cce57c7eacc861c9dfe151a19da1e8428595664f6ad3cce7f05a8f9dc09a5059b7c64f3bce8261a0bb65e57
SSDEEP

12288:HNiRjQq6fTJ7Hv49RygdbGsS2BSVohXVQ2AfF4+GbpTAMRaA4xW820Sj2cPeer3/:t2M+5StShXVQVGpJR943u2wew3uFqd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ededf870b79be025101838e7ae8cf62_JaffaCakes118

Files

3ededf870b79be025101838e7ae8cf62_JaffaCakes118
.exe windows:0 windows x86 arch:x86

204693aa89ecdf15c4c069c311cb6852

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

CloseServiceHandle
CloseTrace
ControlService
CloseEventLog

kernel32

GetModuleHandleA
CreateFileA
GetLastError
WriteFile
ReadFile
GetVersionExA
ExitProcess
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
TerminateProcess
CreateThread
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime

Sections

.text
Size: 289KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 554KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 716KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ