3fc38ee0746bf071ff5bbd6fb58e0d5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fc38ee0746bf071ff5bbd6fb58e0d5f_JaffaCakes118
Size

29KB
MD5

3fc38ee0746bf071ff5bbd6fb58e0d5f
SHA1

dbab5c55ac3deb6d26a4b3b75fb0885583632fc4
SHA256

648f9210c1fcd838105ebd8b3df25dc48c641823848f4efdc9608ed31cd6e438
SHA512

d4f913f9048daa50b62b6d99d301d678e836239a229419345a0312d7acabc3f1b313194e1e7add75c409b311ebaa857dc74d38bda028564072b0a64ccb32c014
SSDEEP

384:s2hXCa3YMhSaG4sQPsBaz+oTSLdRDpmL9kxXkIXBECJAWTV/BnNuF9R4iaX56P+q:J1h7xssigQpm9Efj3QF4ws

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fc38ee0746bf071ff5bbd6fb58e0d5f_JaffaCakes118

Files

3fc38ee0746bf071ff5bbd6fb58e0d5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5f9f0c7b409f9841b4caa604eb899a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
SetUnhandledExceptionFilter
Sleep

msvcrt

_setmode
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_filbuf
_iob
_onexit
_setmode
atexit
exit
fclose
fgets
fopen
fprintf
fread
free
fwrite
malloc
memcpy
printf
signal
strcmp
strerror
strlen

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE