3cb082161fa43b22a8a222215af2aa27_JaffaCakes118 | Triage

Sharing

General

Target

3cb082161fa43b22a8a222215af2aa27_JaffaCakes118
Size

49KB
MD5

3cb082161fa43b22a8a222215af2aa27
SHA1

18149dce7a19f7480d9b782f59cccec1d07f38cb
SHA256

b58ea679f09197e43a3136396e1d8ff70880e1b762953285b7092c8df1b6ad03
SHA512

c934ecd874c390f41766b0d143c98417fdf920bc146cbf76f7a6ff6a461aadfa763225b8ffbcda1d65d1f9255650370c3906f7cfb4672f97af53360ea74ac2cc
SSDEEP

1536:J+ZCbUnQ7pY92LNtWCOuXpJyVLVJpJnC:SWUnOpYUtW+ydp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cb082161fa43b22a8a222215af2aa27_JaffaCakes118

Files

3cb082161fa43b22a8a222215af2aa27_JaffaCakes118
.exe windows:3 windows x86 arch:x86

35626f15848e8324c125f78559295639

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateFileA
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
GetSystemTimeAsFileTime
HeapAlloc
InterlockedIncrement
QueryPerformanceCounter
VirtualAlloc

user32

DefWindowProcA
DispatchMessageA
EnableWindow
EndPaint
GetCapture
GetDC
GetKeyboardType
GetSysColor
IsChild
IsIconic
IsWindow
LoadIconA
PeekMessageA
ReleaseDC
SetDlgItemTextA
SetWindowTextA

Sections

CODE
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ