3f2daf718e77ff42ed806dfcbeb2187f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f2daf718e77ff42ed806dfcbeb2187f_JaffaCakes118
Size

6KB
MD5

3f2daf718e77ff42ed806dfcbeb2187f
SHA1

481e8144edb69f2f7584a955d399c01b08b3cb90
SHA256

bd1ff1524b8daa5a67f5eb92a39ec4414c8c87ad4e734dfb2075cf396f0ae0d1
SHA512

3f164d36d586fcce28238020235fc7268797a94a30b2e49b9e40fd46a83c70befa3a9f83ba8124537b7b8adc87364e9eff8dba81d0de06b44cfd769b4b7a6ae3
SSDEEP

192:6O9fmPj+/jPJxY7OO9HteGZcOnwtrTE0Fc:7tmPj0xY7OO9XKnEkc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f2daf718e77ff42ed806dfcbeb2187f_JaffaCakes118

Files

3f2daf718e77ff42ed806dfcbeb2187f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dccc3ff567b331f7f08b712d83bb522f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDrives
Heap32First
FindClose
GetDiskFreeSpaceExA
LoadLibraryExW
ResetEvent
GetCommandLineA
FreeConsole
CloseHandle
VirtualProtect
LocalFree
SetLastError
GetLastError
SetLocalTime
EnumResourceTypesW
GetModuleHandleA
TlsGetValue
CancelIo
IsBadReadPtr
IsBadStringPtrA

user32

IsIconic
CopyImage
CreateWindowExA
GetUpdateRect
GetScrollBarInfo
CloseWindow
GetMessageA
DragDetect
GetKeyState
EnableWindow
CreateMenu
DialogBoxParamA
DispatchMessageA

hlink

HlinkCreateFromString
HlinkCreateFromData
HlinkNavigate
HlinkOnNavigate
HlinkClone

advapi32

RegCloseKey

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ