3ab376b0166e59c34aff43285a6cced8_JaffaCakes118 | Triage

Sharing

General

Target

3ab376b0166e59c34aff43285a6cced8_JaffaCakes118
Size

12KB
MD5

3ab376b0166e59c34aff43285a6cced8
SHA1

943e3077676a7e4bc978b2ae09ce7ded35398738
SHA256

2426f0d26b617a009f2eaf21dc23e52b642235eb517a2867f6b53bea80d01d4c
SHA512

ccd58c2fc3a6df8e0fe6f16fb314f2e756c0902454186db31d362d09f59567abeadd1ad7f6fcbc5ac0fa3ae849366992ef052c8b760c07020ef9396859b5a159
SSDEEP

192:EGxXevbLDFWsbPN81x0juns/ruIMTlFwOSp:EGxXev3DEKPNTjunlIMBFtS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ab376b0166e59c34aff43285a6cced8_JaffaCakes118

Files

3ab376b0166e59c34aff43285a6cced8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e953eccdb57606271cd3393c49cc78a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetStartupInfoA
Sleep
GetLastError
GetModuleHandleA
FreeLibrary
GetCommandLineA
LocalFree
lstrcatA

gdi32

GetObjectA
GetTextMetricsA
MoveToEx
ExtTextOutA
GetDeviceCaps
GetBkColor
SelectObject

Sections

.text
Size: 1024B - Virtual size: 933B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ