3361b18605ae28c5b0f545e8f6952cc8_JaffaCakes118 | Triage

Sharing

General

Target

3361b18605ae28c5b0f545e8f6952cc8_JaffaCakes118
Size

11KB
MD5

3361b18605ae28c5b0f545e8f6952cc8
SHA1

773198cbc4e29a34e222be16ae5beea814e2a182
SHA256

2e81052baefbcb6f3be7f8745bb02e2c3fa14adf9a8d2ca37a1a25bf08a5b1a7
SHA512

b17abe3735d4a5be3a797ce1ee2ae323b251c1605e930c48711c1ae9edbd42bacf05271923263b713c172b917f4a7531e23afe1f372103547cdb3a2a966c630e
SSDEEP

192:RzX7y5TC7ECBud+z3Sm5Hofsfxe0MDUXNaGfCbG7W3o:JeC7ECBCm5IfMe0M2VfuG7W3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3361b18605ae28c5b0f545e8f6952cc8_JaffaCakes118

Files

3361b18605ae28c5b0f545e8f6952cc8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1b1bd54ec3c0f7d732b7c337f3ce39d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetThreadPriority
CreateProcessA
GetStartupInfoA
GetACP
GetCurrentThreadId
CancelIo
GetTickCount
GetCurrentProcessId
GetCurrentThread
lstrcatA
FreeLibrary
GetProcAddress
LoadLibraryA
MoveFileExA
GetCurrentProcess
CreateFileA
lstrlenA
GetTempFileNameA
CreateDirectoryA
Sleep
lstrcmpiA
DeleteFileA
ReadFile
SetFilePointer
GetFileSize
GetSystemDirectoryA
GetModuleFileNameA
GetTempPathA
GetShortPathNameA
GetLastError
CreateMutexA
FindFirstFileA
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
WriteFile
ExitProcess

user32

GetCapture
GetTopWindow
GetActiveWindow
SetActiveWindow
wsprintfA

gdi32

CancelDC
GetBkColor
GetBrushOrgEx
CreateCompatibleDC
CreateCompatibleBitmap
GetBkMode

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ