3b693967a3caa060312cc460660b3818_JaffaCakes118 | Triage

Sharing

General

Target

3b693967a3caa060312cc460660b3818_JaffaCakes118
Size

87KB
MD5

3b693967a3caa060312cc460660b3818
SHA1

78ed0bb2cb5768369cf1add358687cc9ac323d17
SHA256

1dd3fef92c313d90c62286dbd857ebf3fde11d6e6be53eeebe94ba36c1f62640
SHA512

34ade2ebd679852dc095a274cde3c19e024d99e013c00b344d7c8f39e30345ea413612ebdf25373592fab6728f1a21ce606771204493fa1af42e54958c615c72
SSDEEP

1536:94RAHcZmofKy6f8CgRNsMb6mqfB3kZqp2L9Vp5mU4CPvPmC1UcUgq83xMi:9HoydgRyM7qfB3kQp2L9V71UI3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b693967a3caa060312cc460660b3818_JaffaCakes118

Files

3b693967a3caa060312cc460660b3818_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eeecfa89622cd3845881bc7f56ae311c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
CreateEventA
GetCurrentThread
GetSystemDirectoryA
GetWindowsDirectoryA
GetCurrentProcessId
GetCurrentThreadId
GetComputerNameA
GetCurrentDirectoryA
ExitProcess
SleepEx
VirtualAlloc
CreateMutexA
LocalAlloc
LocalFree
GetCurrentProcess

advapi32

GetUserNameA

user32

GetSystemMetrics
GetForegroundWindow
GetActiveWindow

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ