3822e21f94d32e0f72ce4e818bb9a8a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3822e21f94d32e0f72ce4e818bb9a8a1_JaffaCakes118
Size

271KB
MD5

3822e21f94d32e0f72ce4e818bb9a8a1
SHA1

6ce0d0fd6e1c10387bc7ef71bf2a4b81834aab34
SHA256

56b3c17aebd317e2852825786dca8a4623339f2d3e6d736d80b7284c9abe9fb6
SHA512

49216ac48545f759a0d913c57ed854b53d4498c917b34df1fd72c29f72f4cc0a0d73471d6a7d0cb7d272b07e6bcdafb5f393314fd218821c13113a32fef6f893
SSDEEP

6144:xFk2jUdB2HeRTOFikLH8K80CpL7IJRppCdp4RM:Xk80IoO4kLHESwp4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3822e21f94d32e0f72ce4e818bb9a8a1_JaffaCakes118

Files

3822e21f94d32e0f72ce4e818bb9a8a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ae2fa89405eb679f2ed36710e38feb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetTickCount
FreeLibrary

user32

SetTimer
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
PostMessageA
RegisterClassExA
DispatchMessageA
TranslateMessage
GetMessageA

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 235KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ