3acf01eeddc7672154fd4f180d29cdb3_JaffaCakes118 | Triage

Sharing

General

Target

3acf01eeddc7672154fd4f180d29cdb3_JaffaCakes118
Size

241KB
MD5

3acf01eeddc7672154fd4f180d29cdb3
SHA1

3f999bab3bf1c92a8b848e0ee5f0e7fbea657105
SHA256

a36eb129d2833e7db674eaa6830d11d288468f5ea0517d96e4ec4645706a7a96
SHA512

516640539f45917643efd7bbdbb7fb8c14faefa142d0b5f0101f9f02d94851a419568efaa4a39a5839ccc9902fefebc9ed7083f346a72a52d1aaff72b1810747
SSDEEP

6144:MXcwWFhukYE/0QZv0m9O4b1I26+BQBoY6:MXRWFHn/0UZOw1MFBoY6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3acf01eeddc7672154fd4f180d29cdb3_JaffaCakes118

Files

3acf01eeddc7672154fd4f180d29cdb3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83a3f4ec0f0ec8459571d78e3e5f86e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RaiseException
LoadLibraryExA
FindAtomA
ExitThread
GetCommState
ClearCommBreak
GlobalCompact
GetProcessHeap
CloseHandle
GlobalFree
WriteProcessMemory
GlobalFlags
VirtualAlloc
GetOEMCP
CreateHardLinkA
DeleteAtom
GetProfileStringA
GlobalLock
EnterCriticalSection
GetStdHandle
GetTapeStatus

user32

RegisterClassA
ReleaseDC
GetFocus
GetClassInfoExA
ShowWindow
IsIconic
GetActiveWindow
DrawEdge
GetWindowTextA
GetClassNameA
BeginPaint
GetParent
GetForegroundWindow
GetWindow
EndPaint
CloseWindow
ValidateRect
GetWindowTextLengthA
GetDC

wsock32

WSAAsyncSelect
WSAGetLastError
WSACleanup
WSAIsBlocking
WSAStartup

dot3api

Dot3SetProfile

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 596KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ