3282d4ca84ca2530fd10715d3240894b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3282d4ca84ca2530fd10715d3240894b_JaffaCakes118
Size

74KB
MD5

3282d4ca84ca2530fd10715d3240894b
SHA1

2a73fa33277b063ae66a8f4e86dae1f1b2b4ffe2
SHA256

70017b65ba377e3c10b7f3ee65a7064da86ac16baa1c7d3d60c38466862e5e5d
SHA512

9e15c29eb252562fea085bc545406ae479d0674ee6d3b258c8709d467718a8c632cf058311078d46f90ffdf877e7e4b741b18f260ac9a2aec100214ad21bb971
SSDEEP

1536:RDB5dUCFkxYZf0SFuWHFwWrAAT1Fi5d805p6gc:RDBvUCIYZf6gwWNiH50gc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3282d4ca84ca2530fd10715d3240894b_JaffaCakes118

Files

3282d4ca84ca2530fd10715d3240894b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9784071ee5e320956833aa365debc1db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ExitProcess
FlushFileBuffers
GetCommandLineA
GetModuleHandleA
GetVersionExA
HeapAlloc
HeapCreate
lstrcpyA

advapi32

OpenSCManagerW

ole32

CoFileTimeNow
CoGetMalloc
IsEqualGUID
IsValidIid
IsValidPtrIn

setupapi

SetupScanFileQueueA

olepro32

OleCreatePictureIndirect
OleCreatePropertyFrameIndirect
OleIconToCursor
OleTranslateColor

user32

VkKeyScanExA
RegisterDeviceNotificationW

Sections

.text
Size: 61KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ