3b22e0bb6803d618a69ab7e7e973ac14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b22e0bb6803d618a69ab7e7e973ac14_JaffaCakes118
Size

58KB
MD5

3b22e0bb6803d618a69ab7e7e973ac14
SHA1

61b34753a2ecab87937e94a981ba502948d4135d
SHA256

f7fba225a64cc02d0d52f3c111f44ad3feb2cb506020b116fe97a1b6356178f4
SHA512

600f85cce7e512c798440bdabc59598dbd9eecdb9c9da32ce457a735b7ce013b0771f2db87b5409f5e1905a65bbeecc0cd2ee678a4f85c91508bafa2407d6f5e
SSDEEP

1536:oPcaQbGfDQ6ym9T3jMfmrXNAuFEO5OAxLtyZvpa:u4KeC3jMkXNrxLn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b22e0bb6803d618a69ab7e7e973ac14_JaffaCakes118

Files

3b22e0bb6803d618a69ab7e7e973ac14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

838e15e8fe8aaf68e74c0a3b1f82e53b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExA
LoadStringA
CreateWindowExA
GetSysColor
CreateWindowExW
LoadCursorW
GetDC
SendMessageW
EndDialog

kernel32

GetModuleFileNameA
GetCommandLineA
GetModuleHandleA
VirtualAllocEx
FreeLibrary
GetModuleHandleA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ