3a2515b42fca55604ae4ab241ae03b9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a2515b42fca55604ae4ab241ae03b9c_JaffaCakes118
Size

141KB
MD5

3a2515b42fca55604ae4ab241ae03b9c
SHA1

bce826d133a336513664fa9d5b0cb845ec1850a1
SHA256

606748827486dc871addb01aa8caf24a50b161ca93e5246361eba5059a549ec1
SHA512

59c703b438a5fc0269840a75f24243aa6c0f527d2bbeb1d8e625f3e1458d329daf019f6bdc9361bcc0f3f15d959e9cbc2f5b20113a36d07e0e264af83f16fc7c
SSDEEP

3072:fiC+z1Jwis6A8uKD1OkLGO4PmxjhodtBMkKGeGR:fi5hVZugGOW4jG1+GeGR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a2515b42fca55604ae4ab241ae03b9c_JaffaCakes118

Files

3a2515b42fca55604ae4ab241ae03b9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

64ee29d7a9011639e2f0f61ffc00b626

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
ResetEvent
CreateMutexA
GetLastError
SetErrorMode
CloseHandle
ReleaseMutex
InterlockedExchange
CreateEventA
GetSystemInfo
WaitForMultipleObjects
SetEvent
OpenMutexA
GetModuleHandleA

user32

GetWindowRect
GetWindow
GetClientRect

oleaut32

VariantCopy
SysAllocStringByteLen
VariantClear
SysStringByteLen
SysStringLen
VariantInit
VarUI4FromStr
VariantChangeType
SysAllocString
SysAllocStringLen
SysFreeString

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ