3cd32f2d39f5e9a3a277e114ab1b57b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cd32f2d39f5e9a3a277e114ab1b57b0_JaffaCakes118
Size

42KB
MD5

3cd32f2d39f5e9a3a277e114ab1b57b0
SHA1

5da00896e95417f9401fc47844631c034ec936a2
SHA256

d0b167893028a3e05bd09eecdcb2e99716b7adf5faa6b2b397327f27c497e679
SHA512

e5541813ddd0f4c1b95c19ee328c62051f080467c94ce24d7945e82e1f8d847c2eaed15383abbbe8677d3f24426d2d0de4336648d1f068c524f16a2ac3b21b18
SSDEEP

768:SKizvwRHlmuMDupzrCXu0kXgJEjVYHnsJDIDoUWkxDoZo85/A7uv8BuLGThhGcw:4zvwtlmuMAXCXxkXgJCVYHnsJooUWkpx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cd32f2d39f5e9a3a277e114ab1b57b0_JaffaCakes118

Files

3cd32f2d39f5e9a3a277e114ab1b57b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2109805714be760d19ddaba04010f4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateThread
DeviceIoControl
ExitProcess
GetCurrentDirectoryA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetTickCount
GetVersionExA
IsDebuggerPresent
ReadFile
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WriteFile

wsock32

gethostbyname
WSAStartup
WSACleanup

user32

MessageBoxA

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 758B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE