3fdfaaad8ec4f929087d1c5fc5a0b9e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fdfaaad8ec4f929087d1c5fc5a0b9e0_JaffaCakes118
Size

204KB
MD5

3fdfaaad8ec4f929087d1c5fc5a0b9e0
SHA1

eca94e355cfb6e30a0a33292b0f7acadce6c123f
SHA256

df6264c1f7907db549523b2e9918989c020191e6d304b2bb26904bb6ead24638
SHA512

113c97cf793de904fff5021ea24918083ed996236c8e19e158f497c639a22ec9450c23555ad185360c4e0fbcaad64b26d67c833c2ccf4a4e3db7c52550e3d3e6
SSDEEP

3072:W+cqBX+UdUOpy2ffW5ZCXnsGmIb362s4mrN+yK0m6vkrCy:W9gXSOpy2fgCcGm3FH4bX6x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fdfaaad8ec4f929087d1c5fc5a0b9e0_JaffaCakes118

Files

3fdfaaad8ec4f929087d1c5fc5a0b9e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf75be68bd5bc605170682908ec88172

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualAllocEx
GetModuleHandleW
IsBadHugeReadPtr
GetCommandLineA
ExitThread
IsBadReadPtr
GetProcAddress
lstrlenW
GetCommandLineW
LoadLibraryExA
ExitProcess
LoadLibraryA
GetLastError

Sections

.text
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ