3826d7dc05b874141851673e88143d3c_JaffaCakes118 | Triage

Sharing

General

Target

3826d7dc05b874141851673e88143d3c_JaffaCakes118
Size

164KB
MD5

3826d7dc05b874141851673e88143d3c
SHA1

39074901d056753071b72c2158cf0e82f944fe21
SHA256

db49f3c2329880e95153c3905df8da65ab970b0830dc9e158d7431f0df32e7e6
SHA512

a0ce0ea7c2f087ccdef31a89de81a5e45d3844fea7e445749e56d3e40675e5bdcb9b536c4c100561d4c990473fe1e366c38963e882a96f3ebbba8f7b02a95a47
SSDEEP

3072:c1f/A3sXGZZXPGLLfOye6S8WcaadgJp/u4YAmueM+LLBy0MddF43OlF10dT7P:c1f/A3oGTfGHOy8jca8l4YGQUd743Ob4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3826d7dc05b874141851673e88143d3c_JaffaCakes118

Files

3826d7dc05b874141851673e88143d3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ac0a9605d03de213ceff65917f7286c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CloseHandle
GetSystemTime
GetFileAttributesA
CreateFileW
GetModuleHandleA
VirtualFree
AddAtomA
VirtualAlloc
GetProcAddress
QueueUserAPC
GetCurrentThread
ExitThread
CreateEventA

user32

DestroyWindow
PostMessageA
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjectsEx
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ