3b5de731e8f0f1c6cca1a0349db6e843_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b5de731e8f0f1c6cca1a0349db6e843_JaffaCakes118
Size

357KB
MD5

3b5de731e8f0f1c6cca1a0349db6e843
SHA1

e56e86133da900ce73eedf73b02bc2fbe07deb0f
SHA256

d4a8e26fe5c87aadd6c0dcec43245f0184397dc5299a03f2b73e0e04a9e7a4bc
SHA512

6b9b3033b7a8b856d594c3a8fa022c638f1b8f5ffa7fd8d7416c787810b2dd5c9b53bc9de85274582381c84ca6e2e606aa091ce7edb30f2c71bb6eff7c04dc8b
SSDEEP

6144:Nmnm9nFK7Ax+LYBrtSRbIqz+WSrLGj+wvjG+qhloMHDjFN6naDzsJK:NhMAxQ1bH8azq0SFNGaPsJK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b5de731e8f0f1c6cca1a0349db6e843_JaffaCakes118

Files

3b5de731e8f0f1c6cca1a0349db6e843_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5636a0377f5e2529ef9e84e67f77255

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
EnumResourceTypesW
LoadLibraryExW
VirtualProtectEx
IsBadReadPtr
GetLastError
Heap32First
CloseHandle
GetConsoleTitleA
lstrlenA
ResetEvent
GlobalLock
SetLastError
LocalFree
FreeConsole
CancelIo
GetSystemTime
GetStdHandle
CreateMutexA
GetModuleHandleA

user32

CreateWindowExA
EnumWindows
CloseWindow
GetParent
GetMessageA
GetDlgItemTextA
GetKeyState
GetMessageA
EndDialog
DialogBoxParamA
IsIconic
CopyImage
GetDlgItemInt
MessageBoxA

setupapi

MyRealloc
MyMalloc
SetupCloseLog
MyFree
IsUserAdmin

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ