JaffaCakes118_3d8a2e5da8c5c98dad8aeba8f52bf147 | Triage

Sharing

General

Target

JaffaCakes118_3d8a2e5da8c5c98dad8aeba8f52bf147
Size

97KB
MD5

3d8a2e5da8c5c98dad8aeba8f52bf147
SHA1

6cfcc42596325fe041ddbaa3580819d97893b4f6
SHA256

2da3e8ee76567c29bdddc0b82bb2d9bec7b6efc05db6c4d8f74ab80b3057809e
SHA512

024446f3a2fccddc5d97c3ddcabf32d03ca9e98db6412a9e191ac75a082963991291303f0f27536b92023b5b072a2cccc415bfbe42fa750b5da94fc9b5d456a5
SSDEEP

3072:5FQwQhEOLfuDg0PtOqzKONqsEykRLSePc:5NOFStZzKqqsE6e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3d8a2e5da8c5c98dad8aeba8f52bf147

Files

JaffaCakes118_3d8a2e5da8c5c98dad8aeba8f52bf147
.exe windows:4 windows x86 arch:x86

042c3e0dabd645f5ceb44bd41cdd4002

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
VirtualAlloc
Sleep
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA
GetModuleHandleA

msvcrt

exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
??2@YAPAXI@Z
free
realloc
??3@YAXPAX@Z
_acmdln
_stricmp

Exports

Exports

Hai

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ