3b77fa218a1117f4afae14ec9104747d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b77fa218a1117f4afae14ec9104747d_JaffaCakes118
Size

54KB
MD5

3b77fa218a1117f4afae14ec9104747d
SHA1

14a53f41bcd8dca39a921125fedd245b1edc5c53
SHA256

6af88411e4c7bcf147bd8e59a93c9d11dc3669974c3ded09af4059bd2835c357
SHA512

1abaa6bbdb5674c10411f69c739bbc2aee02af4fabd4a81b90efaeaaa93761290db86e2270cc95d51d44a30534b85b6bbdfa05dbaa43fb5e45f00aaf6944a23c
SSDEEP

1536:OAideV6apqwEnNJWj2r/RSts3S8vlAywT:OERpqw4Nsj2r/RSt9ywT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b77fa218a1117f4afae14ec9104747d_JaffaCakes118

Files

3b77fa218a1117f4afae14ec9104747d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3140dd722a16f135aef53d310ad4c6fe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

bthprops.cpl

BluetoothGetRadioInfo

ws2_32

closesocket

user32

SetFocus

advapi32

SetSecurityDescriptorDacl

ole32

CoTaskMemFree

oleaut32

VarBstrCat

Sections

.MPRESS1
Size: 48KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE