3d390157b5792bf7c2f9c82509da24f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d390157b5792bf7c2f9c82509da24f9_JaffaCakes118
Size

280KB
MD5

3d390157b5792bf7c2f9c82509da24f9
SHA1

fbb9dad9dfa1685dc06d05ac9e8e428dacf7f2a7
SHA256

23bd7d48b27ea3dae18fb8638e592d9d31f65abf1aaa964b1b4d185edc4f8fd7
SHA512

4325e657c018d8cc8192490336644b5ca0f916a118729fbbf20a65d11331432fbd5814436e1f959eaee3a21e23ee8a65642f214082a448495e3473e1499566a2
SSDEEP

6144:09AdSNEbn2OCOif7WlTObvkIrflb77R/61SrGg+Sh5FETH:03NYzCLfykbkIrfF7NiSvC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d390157b5792bf7c2f9c82509da24f9_JaffaCakes118

Files

3d390157b5792bf7c2f9c82509da24f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7f5ee51778fcc6fc7871cc95cd8fdcc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetProcAddress
GetCurrentProcess
TlsSetValue
ExitProcess
GlobalLock
WaitForSingleObject
LoadLibraryA
GetLocalTime
UnhandledExceptionFilter
GetSystemInfo
GetProcessHeap
GetEnvironmentStrings
FreeLibrary
GetDiskFreeSpaceA
SetFilePointer
GetFileAttributesA
SizeofResource
VirtualAlloc
ResetEvent
CreateFileMappingW
CloseHandle
FormatMessageA
GetCurrentThreadId
GetModuleHandleA
HeapCreate

user32

CheckRadioButton
GetDlgItem
SystemParametersInfoA
GetWindowLongA
GetWindowLongW
ScreenToClient

msvcrt

realloc
qsort
_XcptFilter
_amsg_exit
memset

advapi32

RegQueryValueExW
RegSetValueExA

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ