3a951e8c72b053f9affee9fc36857288_JaffaCakes118 | Triage

Sharing

General

Target

3a951e8c72b053f9affee9fc36857288_JaffaCakes118
Size

32KB
MD5

3a951e8c72b053f9affee9fc36857288
SHA1

e111ecf48b25cf259492702003e4b7e18f13777c
SHA256

03cabde77bec102f16281c2cd646ab21c985dfd3941f1b479c7de02c4916f796
SHA512

703338044744d3955dfb96afa5112f5a3aa0e1d4228b3094043b7165d3c2df9d25b6b6a3f8baa9fa238d3f3ed9dfa62e1bba40d805618df7947f05a0774d2ce4
SSDEEP

768:cXDuy7nt9vSb7O8wYmc8EwFduG3tYqavHkokI:cXDT7T4OO4EwuG3Wp/k6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a951e8c72b053f9affee9fc36857288_JaffaCakes118

Files

3a951e8c72b053f9affee9fc36857288_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cec1fdf56c97a3e2a75fd98613540de4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyCursor
TileWindows
DdeUnaccessData
SetSysColorsTemp
SetScrollInfo
DlgDirSelectComboBoxExW
PtInRect
CsrBroadcastSystemMessageExW

kernel32

GetLastError
VirtualProtect
GlobalAlloc
GetPrivateProfileSectionA
ConvertFiberToThread
HeapSummary
lstrcatA
GetVersion
SetDllDirectoryA

gdi32

SetLayoutWidth
SetViewportExtEx
CloseEnhMetaFile
CreateMetaFileA
GdiResetDCEMF
GdiSetLastError

Sections

.text
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE