3b87941ddc7ce8f6d6131eff3263f362_JaffaCakes118 | Triage

Sharing

General

Target

3b87941ddc7ce8f6d6131eff3263f362_JaffaCakes118
Size

228KB
MD5

3b87941ddc7ce8f6d6131eff3263f362
SHA1

00f0bdf5f3e6307a472f935204839de2eeb21d41
SHA256

9c755bfba1f2f30bd9ac021eba4be52a3cd68dcc742535f6c10eb66e9ad050e3
SHA512

735593235e9fbb9c75dc6762d01e04f8898b99d1727cbdcfc9c143e40c239dec5e513c45d21eb631b1515aa0f13327cce890f9e9ef8f21e0f5db3ea72303d408
SSDEEP

3072:vl+Z6wef6y/aI2kPXqCSBF8yNnAKoxuFoaDms8bwW+h7kj7+e8WB8:d+M3f6gaI2AX6xNAKoSmJkvtwBS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b87941ddc7ce8f6d6131eff3263f362_JaffaCakes118

Files

3b87941ddc7ce8f6d6131eff3263f362_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f226031010c9b14dc4d705e22efa165a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
ExitProcess
GetProcAddress
LoadLibraryA
HeapAlloc

user32

CloseWindow
CreateWindowExA
CharLowerBuffA
wsprintfA

advapi32

RegOpenKeyA
RegCreateKeyA
RegDeleteValueA
RegEnumValueA

ole32

CoGetClassObject
CoCreateInstance
CoInitialize
OleRun

Sections

.text
Size: 80KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 76KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE