3af291af237047450878d1ae0b8eb516_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3af291af237047450878d1ae0b8eb516_JaffaCakes118
Size

668KB
MD5

3af291af237047450878d1ae0b8eb516
SHA1

5a3b76eb9da9c62a94f903cf28af816fab9ee96e
SHA256

ce46e76c7612d20fc24faaf6a92b512178ba3fc85cef2b4d2f67db3a907fd997
SHA512

912f142090113d7b108de07480b62b449e7a6547f5b573e72f001a811094c45120261df33fd82f84ac5ef29f5faa5266ba7d6cfc0d75bb322a5a9af5034213de
SSDEEP

12288:jaUizSlMMdzK8I+RD3/00J08+b1QBJeob2DAlMPA0r6HjX6pZgufYe:2UgS9dNf+5MJeQoYWJjg7e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3af291af237047450878d1ae0b8eb516_JaffaCakes118

Files

3af291af237047450878d1ae0b8eb516_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2a08340f69af06bb095d0210f2a34933

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFileMappingA
UnmapViewOfFile
ExitProcess
ExitThread
VirtualAlloc
VirtualProtect
VirtualUnlock
ExpungeConsoleCommandHistoryA

user32

SendNotifyMessageW
InsertMenuA
SendNotifyMessageA
GetKeyNameTextA
FrameRect

Exports

Exports

Crmftlo
Janygoadkxl
Itdgewjavhx
Xrkolfb
Ssfxogvg
IsKalmxhf
InitMonfskcrhlg
Cjcjgmri
Phcoqir
GetOnnspkikrj
Dkswahu
OpenDwgtgiu
WritePeoxvskammp
Vqwlbxfd
BeginAfsffeq
IsAidhtcqvtf
Xxhyksvo
GetPsapuuy
BeginTbibpeil
AddDwqmhhxgii

Sections

.text
Size: 431KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 934KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE