3fa51a5ddd1216c45bee9b9094002a0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fa51a5ddd1216c45bee9b9094002a0c_JaffaCakes118
Size

4KB
MD5

3fa51a5ddd1216c45bee9b9094002a0c
SHA1

36bde957957f75ca8f46e3d2e37ef7cf73fb6227
SHA256

72dcda0f98677ec7ce3631c094874737803a0f01272f4b11ee09cd55a1a4b57c
SHA512

2e665152fb9800fe7e7e01c81fb733b83a05af4d864a42115baab8f6008aa548c60427b8f39ef55a1973e19cd0f7b2d2f804d3d29fa76a1a3b652e4b6332a032
SSDEEP

48:aqnHBepXmmayAt5jiUWG2JfiTnls85/YUGUwisiBcJwUor:EpXLayAtlzD/YUPwkyJxor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fa51a5ddd1216c45bee9b9094002a0c_JaffaCakes118

Files

3fa51a5ddd1216c45bee9b9094002a0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6af48c7a7d63b2c8c4c1c11edc2ffdfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntA

kernel32

GetFileSize
lstrcpynA
CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
FlushViewOfFile
GetCommandLineA
GetProcAddress
GetSystemTime
LoadLibraryA
MapViewOfFile
UnmapViewOfFile

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ