3b7bc7f492cfd473ec461c8b455357de_JaffaCakes118 | Triage

Sharing

General

Target

3b7bc7f492cfd473ec461c8b455357de_JaffaCakes118
Size

77KB
MD5

3b7bc7f492cfd473ec461c8b455357de
SHA1

98bb125be79e458465d3a5ea356d3e9aaff1e636
SHA256

ec82bee3e40e707878d0c7618b864a7276cce64ff2783e9a7118fdf3700c1d53
SHA512

f606c7b1659cfa0fa8ce213c1da36be9cad8a788fdaf84b475b9592fbc85df129977418b07e382d3c3877dc6c7293833c91b544cdfcf51bdc77647e56435bb96
SSDEEP

1536:BRTi+Bwyj+ElS9DanycPgfT72aj53/KCY3L3RiAfLiZaK+Q:Ti0wE+El8DMdPgf1N3/VefLib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b7bc7f492cfd473ec461c8b455357de_JaffaCakes118

Files

3b7bc7f492cfd473ec461c8b455357de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a46eb5d8a26df66b7e5340e682f8a377

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
PostMessageA
GetMenu
FindWindowExA
FindWindowA

kernel32

lstrcatA
WriteFile
Sleep
CloseHandle
CreateFileA
ExitProcess
GetTempPathA
LocalFree

shell32

ShellExecuteA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ