3b60884df5fe6145b484e587877c7de0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b60884df5fe6145b484e587877c7de0_JaffaCakes118
Size

125KB
MD5

3b60884df5fe6145b484e587877c7de0
SHA1

144b93f4c2cfb7fa3687c8822134f2cfb96270dd
SHA256

b192d26bc1776ca99121601bab3fa67969511084f7f983e4283f617baa43eea6
SHA512

3c935a23d7f53d013a06914258b3dd65ee33cdf605a28d0261d82451fde571c0acde5c5209866050823f6e69b947d9691c8f291d5c13b71a81b18843d8e125e4
SSDEEP

3072:V9uHjVFB2hqHphdV858tyHgeOygsWyuvzY:OF2IHphdqWYAx/y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b60884df5fe6145b484e587877c7de0_JaffaCakes118

Files

3b60884df5fe6145b484e587877c7de0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd0009acece81ae4a82d8d3d5db4311f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsDlgButtonChecked
PtInRect
GetCapture
PostQuitMessage
PeekMessageW
GetMenu
PostMessageA
GetTopWindow
GetDC
IsWindowEnabled
PeekMessageA

gdi32

CreateCompatibleDC
SaveDC
LineTo
CreatePalette
BitBlt
CreateDIBSection
CreatePenIndirect
CreateBrushIndirect

kernel32

LoadLibraryA
GetCommandLineA
ExitProcess
SetEvent
SetFilePointer
GetCommandLineW
VirtualAllocEx

Exports

Exports

_LfeVq_FzE@20
OU5LHXvtPe@4
102hlg0O

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ