3f06d953160b28cd27bb2da0ba0be7e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f06d953160b28cd27bb2da0ba0be7e0_JaffaCakes118
Size

141KB
MD5

3f06d953160b28cd27bb2da0ba0be7e0
SHA1

4420a1361009d23858a4fad362f1255d0e68ee2e
SHA256

74ab1ec158ff0562e98f0f8d55e0921953a7e641f2f3376384a7d09a822d09fb
SHA512

583f829e242d639f8570b492fb7388f8e108c1a289d0d16ed6e97a97a54d43648f2ffd8c0d99416da35fcca321ad220e8adf5ea5bebd762e02134eb288a78922
SSDEEP

3072:VNa/9fk1/+YG1mqdUA3knQFZhHfyjC+iEtAx+3PNyips4oURi8KW:VNO9fGpG8qdSQFHH6jC+iEtfPNyiRRi1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f06d953160b28cd27bb2da0ba0be7e0_JaffaCakes118

Files

3f06d953160b28cd27bb2da0ba0be7e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cf41a4f8b585b0e57913177dd5aef43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleOutputAttribute
GetLogicalDriveStringsW
VerLanguageNameA
SetFileApisToOEM
GlobalAlloc
EnumTimeFormatsA

user32

DialogBoxIndirectParamA
GetGUIThreadInfo
DialogBoxParamW
GetMenuState
wvsprintfA
SetClassWord
DlgDirSelectExW
CallNextHookEx
CharUpperA
EndDialog
GetOpenClipboardWindow
SetSysColorsTemp
GetMessageExtraInfo
BlockInput
GetGUIThreadInfo
GetParent
ShowWindow

gdi32

CLIPOBJ_cEnumStart
EngStrokePath

Sections

CODE
Size: 9KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ