3b40844371ab0cde260e9ac36b8a570a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b40844371ab0cde260e9ac36b8a570a_JaffaCakes118
Size

122KB
MD5

3b40844371ab0cde260e9ac36b8a570a
SHA1

9cb7698e0b729592041a1494eb57fb2389754150
SHA256

9820af45cf767551ecb0cb032f2af059b4a385d5ca2b92f1526f6bca5fa38e52
SHA512

623666ac3d4f3f1d74c75162e91e517c0422f53dcf6c047ffad1d89b96fd21d583d7f20b7cbc50f1b6e4392d3d13c2dc8db2fd9000f45f77081744784c8ea14a
SSDEEP

3072:KnbJpEypKc+JjCc3Jcy006iSmmG/6icKdYlO1:gbJpd6GcOrmmi9cKd2O1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b40844371ab0cde260e9ac36b8a570a_JaffaCakes118

Files

3b40844371ab0cde260e9ac36b8a570a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

1df0de6e7c04336218c5d9de6fb34d44

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CompareStringW
GetCurrentProcess
GetModuleHandleA
GetVersionExW
LocalFree
MultiByteToWideChar

user32

CharNextW
EnableMenuItem
LoadStringW
UpdateWindow

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 106KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ