3184c9cab3b56a062634058b545cdabf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3184c9cab3b56a062634058b545cdabf_JaffaCakes118
Size

32KB
MD5

3184c9cab3b56a062634058b545cdabf
SHA1

4cb6a6a19ad11a0d5b4cb7aebbdde770a9a479ee
SHA256

210402e86d3b9d512275139e6dd9fb38adc6764fe384192bd4cd6a667d3a41c4
SHA512

dc0b2477b1930b975218670e457f9390742b058c179d11522a038d9979076e0ac322de3f78f439199f35be20903a7ef853f51586004f394eb655aaf6bdc56c34
SSDEEP

384:0kWjGZpgRsmJEzV/NP//U1JAJVhm7Yl+C3yxisbNV7Yl+C3yxisbfrCqqTcujtH:LWSfgRtOzV/RJJ3NgPxQgP7+qWnH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3184c9cab3b56a062634058b545cdabf_JaffaCakes118

Files

3184c9cab3b56a062634058b545cdabf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6d196f511d488e007276d948febef20a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
ReleaseMutex
GetVolumeInformationA
GlobalLock
VirtualAlloc
GlobalAlloc
GlobalFree
GetSystemDefaultLCID
GetUserDefaultLCID

tapi32

lineSetNumRings

user32

CreateIconIndirect
GetWindow
GetAncestor

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ