3cbabf6d25b8d35902fa1ecf396e1f7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cbabf6d25b8d35902fa1ecf396e1f7d_JaffaCakes118
Size

80KB
MD5

3cbabf6d25b8d35902fa1ecf396e1f7d
SHA1

d38a1a3839574d975dd788405667639671ca25ad
SHA256

524d0f8248653011bbeffb5f9b80c28f105373576d90780e35fac2c83dfdf617
SHA512

f3b1de923cb60a8cb894bc32701e4cd266141dc09032e665546024165dc758344a84b9ef1a1db7aa37aae39ce4e70eb5ecd30fd5f75c1010595288753c5919be
SSDEEP

1536:yqg1e0wNkbtOBybuAQ4a8AbOpuqrm9n5T5FsNNsBy:yS0wObEwfZAbOYOm9muB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cbabf6d25b8d35902fa1ecf396e1f7d_JaffaCakes118

Files

3cbabf6d25b8d35902fa1ecf396e1f7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b567916c531d1e1855a18fde0eb63104

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetStartupInfoA
GetModuleHandleA
CreateThread
Sleep

user32

SetWindowPos
MessageBoxA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
PostQuitMessage
DefWindowProcA
SetWindowPlacement

ole32

CoInitialize

gdi32

GetStockObject

msvcrt

_controlfp
__set_app_type
__p__fmode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
strlen
__p__commode
strcpy
memcpy
memset
??2@YAPAXI@Z
getenv
sprintf
malloc
memmove
strcmp
_stricmp

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ