3cb7737c4a1684f033881aba9ac3b6e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cb7737c4a1684f033881aba9ac3b6e7_JaffaCakes118
Size

370KB
MD5

3cb7737c4a1684f033881aba9ac3b6e7
SHA1

4dea6671f55d9076d6c1ddf6cb2c9354117947ec
SHA256

61dcab026cd2aeaaf52d4b3f09cb3a6258731162305292a6d3f97837e6160bbb
SHA512

d9c84e4d4af2dc7ec5e48a2e92e8c3285d16e2bcda3a3c32cb1df0600cc88d6ae5ba3fa9fc938b527ab76364b8c9f8babd81865c136a081e899688168504b356
SSDEEP

6144:+TA3s6GyC2Cy8fumy5UGR6go/pnGSBR0HfYHkImafR7pgXcHBf5NUpY/HzERKK:SA8z52CFumQUGQgoRGM0HfYAkRZd5mWI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cb7737c4a1684f033881aba9ac3b6e7_JaffaCakes118

Files

3cb7737c4a1684f033881aba9ac3b6e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01f54919547e5bf56c00211997f89094

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
GetModuleHandleW
InterlockedExchange
ResetEvent
FreeConsole
LocalFree
VirtualAlloc
GlobalFree
GetDriveTypeW
CreateThread
ReleaseMutex
lstrlenA
CreateFileW
GetExitCodeProcess
GetMailslotInfo
LocalSize
GetACP
ReadFile
FindVolumeClose
CloseHandle

user32

GetKeyboardType
DrawStateW
SetFocus
GetSysColor
EndDialog
GetCursorInfo
GetClassInfoA
DispatchMessageA
GetClientRect
CreateWindowExA
GetDlgItem
CallWindowProcW
IsIconic

dsprop

CheckADsError
ReportError
CheckADsError
CheckADsError
CheckADsError

desk.cpl

InstallScreenSaverW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ