3d07365dcbfca19b3aa6063a334c9227_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d07365dcbfca19b3aa6063a334c9227_JaffaCakes118
Size

113KB
MD5

3d07365dcbfca19b3aa6063a334c9227
SHA1

c793a6ed6588cf1f2b16d0748c0f34db611f645a
SHA256

1ab5cd6a44665c746a1880d30d9e3870f5a041b5a5ed15efb6b773d24520b5da
SHA512

5f9cba410fe03a54d1742cc2be974c0e9f131dca6448fc72de3aa643e165577421ea165d054b8a669a1c9c5019ed7087fac8bdcd25509e2bace32de6573b3a8b
SSDEEP

3072:jC9tsuQ6VPeDZ1Ldqqn2momYohv0ENK6pnm0iW:jC9Gv6VPeDtqqDomBh8I3m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d07365dcbfca19b3aa6063a334c9227_JaffaCakes118

Files

3d07365dcbfca19b3aa6063a334c9227_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a66849fa3ced1b03619e81ed92ec6aa7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetContextToken
ReleaseStgMedium
CreateOleAdviseHolder
CoReleaseMarshalData
GetHGlobalFromStream
OleCreateStaticFromData
CreateStreamOnHGlobal

kernel32

VirtualAllocEx
GlobalAlloc
LoadLibraryA
DeleteCriticalSection
CreateThread
DeleteFileA
VirtualAlloc

advapi32

RegEnumKeyA
RegQueryValueA

user32

IsMenu
CreateMenu
GetMenu
CreatePopupMenu
CloseClipboard
CharLowerA

Exports

Exports

qZJvN0DHfAglQk@12
1NTozlSmUg
k0t59rpNKwzt
KoXl15bUU7@4
_dmLYa
_Jujj42K2b2uxbI@12
_Far2PbZS
ewBUnNvSG@24
_KM2SIJH@24
_92L3PDepy7
KlnwOMGbX
KJrUez
_9qdxFqsP3T5SX0
_pIndRYfN6LZ0x@8
_CQhzskvLSZ2
_H0Pn_
_zoMIQGCPfsFmW
x1cIS@16
_PsdJN5KJI@4
_CCmp2VEkHqxozD
BXehmLK9VFN1Xh
jZpXHqs6
mGg3q4Pz4
_jPNARH@20
23B40@8
zKLfjIAJu@16

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ