3b901b075ec6c17722ef882246ddcbf1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b901b075ec6c17722ef882246ddcbf1_JaffaCakes118
Size

20KB
MD5

3b901b075ec6c17722ef882246ddcbf1
SHA1

300c1688ad4590b6feea816b3b2fa422f8af5e12
SHA256

ae6a098557d0fefa0df8f0e2d0a8c82d6aa38fb78f6a9db50f55eea34cee65d5
SHA512

1f3648ec304060030544615b4cc0d1d3e0a5c6618b17143ea3bf1bfe75050c6daeba897034093e08cf21506e9b0216e4809e7bc9fb2fe2ebe7c57342118dd0d7
SSDEEP

192:wRdhzgwldLxRb6kxQUAOGFgOcRz3vQ69YfmsZlgUO8CPk:wzxgWdLHb9W5OsgOcVH9YfmsZl5KPk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b901b075ec6c17722ef882246ddcbf1_JaffaCakes118

Files

3b901b075ec6c17722ef882246ddcbf1_JaffaCakes118
.dll windows:4 windows x86 arch:x86

43f7136747b16454a9352ca2808204c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
GetModuleFileNameA
GetModuleHandleA
Sleep
VirtualProtect

msvcrt

__dllonexit
_errno
_iob
abort
fflush
fprintf
free
malloc
memmove
strstr
system

user32

GetAsyncKeyState
MessageBeep
MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ