3afe70e8b4eb3cde6b0f04b393cbea92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3afe70e8b4eb3cde6b0f04b393cbea92_JaffaCakes118
Size

14KB
MD5

3afe70e8b4eb3cde6b0f04b393cbea92
SHA1

8301637d2c71c1ecbb9f831fee399a134830170f
SHA256

17ab16028be9997b118b2cb6c1d37e935bdc427fadd3e3d07b1dc031859e9615
SHA512

a277bf87fc27397cea8d03372314cbc0cae057505e219b15d912a6a846b7ade891edf66505d41a0098ea83cc4d8d453df8292fe13a81b5f14de8628809db78b7
SSDEEP

192:CQ8BYV643zsTvuH9+CWFvLy4K7chxRUTzslTeSUE/ncon:d8B664ys+CODRKWRYQoS9c4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3afe70e8b4eb3cde6b0f04b393cbea92_JaffaCakes118

Files

3afe70e8b4eb3cde6b0f04b393cbea92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47a2ce7cb07ca6d678d4679b1590e821

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyIcon
GetMenuBarInfo

kernel32

CreateSemaphoreW
ValidateLCType
VirtualProtect
GetLastError

gdi32

GdiSetPixelFormat
GdiComment
RemoveFontResourceTracking
GdiGetLocalBrush

comdlg32

PageSetupDlgW
CommDlgExtendedError
GetSaveFileNameA
FindTextA

Sections

.text
Size: 4KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE