3c252cd525cdbcd7ff50909fc7a6d170_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c252cd525cdbcd7ff50909fc7a6d170_JaffaCakes118
Size

94KB
MD5

3c252cd525cdbcd7ff50909fc7a6d170
SHA1

b4e4c4fb2eb84b9a4455a805374a4dad2323e60e
SHA256

467ab9310c381cdab76c1bf609b3664eaf0e13a6bc5a3b4d660772c9af8b6b84
SHA512

b43383c90d6c3d4dcacbdd7ae75c9b83a0e851cb423f41f10bf997eb5d6973c1e342852d7874119a87af6c11d6fe55d9fdb4c63f417b8f6dd6481dfe2c3f73cf
SSDEEP

1536:fwqQxinVCGs6EcP6Q1sfMFzPOp3C0k0klGrAcc1q26f6kUU8cZe8ce+AeuO:f9Q4VCtwVBFz63ZAcX286kUdcZe8ce+V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c252cd525cdbcd7ff50909fc7a6d170_JaffaCakes118

Files

3c252cd525cdbcd7ff50909fc7a6d170_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45857c78f3fed774ab508c015b1010c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CloseHandle
CreateFileA
LoadResource
GetTempPathA
GetCurrentThreadId
FreeLibrary
OutputDebugStringA
GetPrivateProfileStringA
LoadLibraryA
GetProcAddress
GetTickCount

user32

GetMessageA
PostThreadMessageA
GetInputState
wsprintfA

shlwapi

PathFileExistsA

msvcrt

_XcptFilter
_controlfp
__set_app_type
__p__fmode
_except_handler3
sprintf
memset
strcat
strcpy
_exit
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ