3d851c3fdf0e3a5bfc932b9f41de002c_JaffaCakes118 | Triage

Sharing

General

Target

3d851c3fdf0e3a5bfc932b9f41de002c_JaffaCakes118
Size

188KB
MD5

3d851c3fdf0e3a5bfc932b9f41de002c
SHA1

1ea180385fb560af6b6153719c3f8c21649b79c7
SHA256

0aa39485801964ea326874950a9f757536751958d818d5e681c2c5f583055ec5
SHA512

982368068a573df6223f8d17db101b0ea6aaf4ebc45ff5e355ab27cc63236bec71af5529215d16bdf44de9f05db667cc95ad9a250ade7c5a636fd5afb7820dc9
SSDEEP

1536:l/KVvhq8aP//mEGE7NqeT0GQpTLSsE9mQZjFE4ahXohF5kYlmM4Q7/hsULFfnuv:xHx/mRE0e0Ga/E9DFt2ohFrlN/2+fI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d851c3fdf0e3a5bfc932b9f41de002c_JaffaCakes118

Files

3d851c3fdf0e3a5bfc932b9f41de002c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61dee12612c1f53deb25568caea806b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSysColorBrush
CharUpperA
SetWindowTextA
GetFocus
ShowWindow
SetWindowsHookExA
ShowScrollBar
GetMenu

kernel32

LoadLibraryA
GetLastError
GetStringTypeW
ExitProcess
GetThreadLocale
GetVersion
VirtualAlloc
GetSystemDefaultLangID

Exports

Exports

_IPc@24

Sections

CODE
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sjdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fgdata
Size: 1024B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ