3330b2ea6f143b109841901185b96e5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3330b2ea6f143b109841901185b96e5b_JaffaCakes118
Size

305KB
MD5

3330b2ea6f143b109841901185b96e5b
SHA1

bc076344247b81af57557f2f1d8a1ad1bc1d8bca
SHA256

a4f63a5628a679ef667a22078baa1f5f5976a0e9f8bc29c39b931972c5fc883f
SHA512

0afdbc73dca67987ce8d08a5cd7eb9dfaf886d319de5900f6313ec1adf82803f85ced5544ef110e18d2e1c84ccc7958106176c081b3c3e7b36744f0c3f814bd5
SSDEEP

6144:DMocFQIV7n5FGsTXAUUOiSS/3TVllcVBv24wyCQDgS1ydUK:DM3QIVDb6/DPlcvv5wy3DB1GZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3330b2ea6f143b109841901185b96e5b_JaffaCakes118

Files

3330b2ea6f143b109841901185b96e5b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9165d358e84f395b0d7d31fd360dc29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
FindClose
GetEnvironmentVariableW
GlobalFlags
InitializeCriticalSection
GetDriveTypeA
WriteFile
TlsGetValue
lstrlenW
GetPrivateProfileStringA
LocalFree
HeapCreate
GetCurrentProcessId
ReleaseMutex
GetCurrentThreadId
CreateEventW
IsBadStringPtrW
LoadLibraryW
ReleaseMutex
FindAtomA

user32

GetClientRect
DrawStateW
DrawTextA
DispatchMessageA
GetSysColor
SetFocus
CreateWindowExA
EndDialog
IsWindow
GetClassInfoA
GetSysColor
CallWindowProcW
GetKeyboardType

rastapi

DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone

cryptui

LocalEnroll

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ