3382fb07bb0b36a68ce935c7d0fbba34_JaffaCakes118 | Triage

Sharing

General

Target

3382fb07bb0b36a68ce935c7d0fbba34_JaffaCakes118
Size

180KB
MD5

3382fb07bb0b36a68ce935c7d0fbba34
SHA1

a8a9807635a8aa032b1eef0d34d656f7e5b57588
SHA256

5ab01293961700e753355119f634d8114fa5f47cdc664477c37f01bafdbb5c84
SHA512

b6e53064964e17f9ec33333e058e8ddf4e2499f6f0696d45660f6699caaaac514379a2a7997130da6c0d432d9f9b314e09cd9a0b82fed6f0a00b5ad90463277c
SSDEEP

3072:9cbzZoL9bDUkKOYHVrH4zrgq0CuJGYNnga8iANzbiQRMLaMUCSgGuJJfE/NE:WXAPUt18rtKNd8VzbiQRML1TkuJBQa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3382fb07bb0b36a68ce935c7d0fbba34_JaffaCakes118

Files

3382fb07bb0b36a68ce935c7d0fbba34_JaffaCakes118
.exe windows:4 windows x86 arch:x86

53e93af84fb397cd653a3575d654aa1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
GlobalSize
GlobalGetAtomNameA
LoadLibraryW
GetModuleFileNameW
GetPrivateProfileIntW
LockResource
lstrlenW
LoadResource
InitializeCriticalSection
WritePrivateProfileStringW
MulDiv
GetVersionExA
GetVersionExW
GetTickCount
FreeLibrary
EnumResourceTypesA
GetPrivateProfileStringW
FindFirstFileW
GetDllDirectoryW
GetModuleHandleW
Sleep
MultiByteToWideChar
FindClose
LoadLibraryA
GetProcAddress
GetLocaleInfoW

shell32

DllGetVersion
ShellExecuteW
SHGetFileInfoA
CommandLineToArgvW
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFolderPathW
ShellExecuteExA
ShellExecuteExW
SHFileOperationW
Shell_NotifyIconA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ