3ef270cfcd391016428f81fd6d827ba0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ef270cfcd391016428f81fd6d827ba0_JaffaCakes118
Size

686KB
MD5

3ef270cfcd391016428f81fd6d827ba0
SHA1

eca535222632004677fdc82939e868613ad2c277
SHA256

d3c4f119b274c7ec9cfa58a9b79e1f7745f609f6d19ebe5c4a0f3d8f0bd9200b
SHA512

f19aacc7c962f07f8fc2d24710d16b04c700cca28962e2c8cad60c00c3557cd50d432e5360dfe79f77562c5fdbc57ab1e3be9d9df9339ce4d0e51fddf59b3ee5
SSDEEP

6144:GyNgsaSwOSCGZYUXYpdSjEoPgNVXvYRn08B+s2ja4PiBD52yhaRE6VWWQlwcJ20f:GyNgMYZErEXoc+FjFoJgiRT5aOT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ef270cfcd391016428f81fd6d827ba0_JaffaCakes118

Files

3ef270cfcd391016428f81fd6d827ba0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7aaf89fdd1ed38cd91c6ea601b81b944

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetDriveTypeA
VirtualAlloc
CreateFileA

user32

GetSysColor

advapi32

RegQueryValueExA
RegOpenKeyExA

msvcrt

_XcptFilter
__getmainargs
__initenv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
exit

Sections

.text
Size: 631KB - Virtual size: 630KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ