3c2549a0bbe4d657f4cbf19d358a1a68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c2549a0bbe4d657f4cbf19d358a1a68_JaffaCakes118
Size

48KB
MD5

3c2549a0bbe4d657f4cbf19d358a1a68
SHA1

700b4b2e5dd2abd13e76ce166acb5dc95342696c
SHA256

98699f204c0cdf4301ef84cf2a40aec1edfb427afc9f215ee6c1181b415115ac
SHA512

5c5a9902f9efe9d90b9584852c57892e7129bb6c178e78902a347757b8867babe4aa442be647a173a0a62fa5568c897b110907b2d04dde10e7e15b5953027c62
SSDEEP

768:BUq+pfIFkfAh0ZdND6vDZYH9PPKtgFxIUtSWRsBeSJaORoKFctyH1bzFTy:u9TYyZjODZopKtgdRs6goGbzFT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c2549a0bbe4d657f4cbf19d358a1a68_JaffaCakes118

Files

3c2549a0bbe4d657f4cbf19d358a1a68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9df9673e51e78c5a7751d218c9eecd82

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
ExitProcess
LoadLibraryA
VirtualProtect
GetSystemTime
ExitProcess
lstrcatA
CloseHandle
GetModuleFileNameA

user32

MessageBoxA
RegisterClassExA
LoadCursorA

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE