3ef23792b42a0acda9e4b1c11f073ae2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ef23792b42a0acda9e4b1c11f073ae2_JaffaCakes118
Size

131KB
MD5

3ef23792b42a0acda9e4b1c11f073ae2
SHA1

46b951a53bad77fea60b541856caf77710d69c11
SHA256

d6bd0088b90c6c236f225482e7694b8aba8dbef747469184275b0a1853101e49
SHA512

de75ea2ba4a30b21b9a25d812af2a2e36807160d8b9f504206ba0be4b245beaf8a0bdded4a0c21d240c2f8fd8cf3e63b39cc7e5cd8d530ed87e9f8b36deccc58
SSDEEP

3072:t2JLbSE3EEQcUzrygMakkxOMm6MAR9pDLXxW:tE0EQAnajxjm6NDlW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ef23792b42a0acda9e4b1c11f073ae2_JaffaCakes118

Files

3ef23792b42a0acda9e4b1c11f073ae2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1bf68ed84a54c908232c6b2ff98f1381

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCmpLogicalW
StrToIntA
PathStripToRootW
StrCmpNIW
ord155

kernel32

lstrlenW
GetSystemWindowsDirectoryW

Exports

Exports

?OpenClipIn@111KPAUHINSTANCE__@@U_SYSTEM_INFO@@/N
?OpenClipOut@111KPAUHINSTANCE__@@U_SYSTEM_INFO@@/N
?UndoAction@111KPAUHINSTANCE__@@U_SYSTEM_INFO@@/N

Sections

CODE
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DSS
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ