39bd7efb674f071b2ba1660748cdb00f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39bd7efb674f071b2ba1660748cdb00f_JaffaCakes118
Size

51KB
MD5

39bd7efb674f071b2ba1660748cdb00f
SHA1

82ae51e56e70b128e00d089b059e6088d9e861b1
SHA256

5373c39dd29fd2821621e32e657a4f7c0983a46ba882325ffdc1536b4b1792ec
SHA512

ff010551656b8bcd892a010ea9c425480517a0288a3f163eb532b77f68a3201c7f9e08f62b2551a88519d0c675e0b6c39fca5746bf355ad59783eb70b7409fd3
SSDEEP

1536:lrBoZXkln5IUmDjoXFY/1kYhRJj4OPbKf:9BoZXkln5I+okkRl4Oz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39bd7efb674f071b2ba1660748cdb00f_JaffaCakes118

Files

39bd7efb674f071b2ba1660748cdb00f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a38650cb369d66580b7111b0447895eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
wcslen
wcscpy

kernel32

FreeLibrary
LocalFree
GetProcAddress
lstrlenA
WideCharToMultiByte
LocalAlloc
FormatMessageW
GetLastError
LoadLibraryW
ActivateActCtx
CreateActCtxW
lstrcatW
lstrcpyW
lstrlenW
SearchPathW
GetFileAttributesW
ReleaseActCtx
DeactivateActCtx
SetErrorMode
ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW

gdi32

GetStockObject

user32

LoadCursorW
LoadStringW
CharNextW
SetClassLongW
LoadIconW
DefWindowProcW
CreateWindowExW
RegisterClassW
wsprintfW
DestroyWindow
MessageBoxW

imagehlp

ImageDirectoryEntryToData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE