3b35711b1c4697d8a17621af459543fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b35711b1c4697d8a17621af459543fd_JaffaCakes118
Size

44KB
MD5

3b35711b1c4697d8a17621af459543fd
SHA1

11fd8b7812d646d9f9911d4e82a56341b7d0eed5
SHA256

8560aefa0d34cbd3d2a1df6fc18daa14d4b33c65b1240dcd8194fdb44b530a7f
SHA512

60b80199bd37ca5ee86214fe644514b8648c422e31f914570f5b259218d3775419691befa913b7d8c6e593f09c3802ac48de149e699b048bb21b35993e3c6346
SSDEEP

768:V9kgqvm3Vu1uS277ah1fb9l0wTSs7glRqRI4HjWkppljK5fTsPunM3tG:Vmli9S27GTwEslURIuaivK5fTsGnMdG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b35711b1c4697d8a17621af459543fd_JaffaCakes118

Files

3b35711b1c4697d8a17621af459543fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac2659be77cec0c6a4ebf6c689535afd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
LoadLibraryA
CopyFileExW
SetThreadPriority
VirtualProtectEx
GetCommMask
GetProcAddress
WriteProcessMemory
Heap32Next
CommConfigDialogA
GetCurrentProcess
AddAtomW
GetWindowsDirectoryW
EnumSystemLanguageGroupsA
GetCPInfoExA
lstrcpy
HeapWalk
GetProfileIntA
GetFileSize
TerminateJobObject
GetShortPathNameA
FillConsoleOutputCharacterW
SetFileTime
FindFirstChangeNotificationA

user32

SetCapture

Sections

.text
Size: 4KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE