3b2c50185152285602368efe64284068_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b2c50185152285602368efe64284068_JaffaCakes118
Size

218KB
MD5

3b2c50185152285602368efe64284068
SHA1

d3bd60356a12a43259fa752485ea2595923b13ee
SHA256

9c82bf248649f8ad93e9f4f4638a4ed4b83f02bff05c1f6ff96e1fd0443af655
SHA512

3d398bb0697ab859344eb28722dc2e1feb51759b073107f31de6d8a76abef186414020b87d07f2d56eb6c627171dd55eed80646a3930e0f2e9498a7abf4d766d
SSDEEP

3072:nzQhkB58CU2S/8NIrxMyjG61YSpBxkYOKLDsx9gjrmlLoLTShF6gHN6G:n2kU2S/dMX61hZ9/sQjOoXSh3o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b2c50185152285602368efe64284068_JaffaCakes118

Files

3b2c50185152285602368efe64284068_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2105672386342fab3ed170ba613bd939

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowPos
EnumDesktopsA
EndDialog
OemKeyScan
ValidateRect
GetActiveWindow
DialogBoxParamA
IsCharAlphaNumericW
SetPropA

ole32

CoUnmarshalHresult
CoFreeLibrary
OleFlushClipboard

kernel32

GetCurrentProcessId
CopyFileW
CreateProcessW
SizeofResource
GetStartupInfoA
AddAtomW
HeapDestroy
LocalAlloc
LocalFree
HeapFree
SetFileAttributesA
DeleteAtom
HeapCreate
InterlockedExchangeAdd
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetProcAddress
LoadLibraryExW
InitializeSListHead

Sections

.text
Size: 199KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ