3dcd1a736bd31e33bb91aee417fc0efe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dcd1a736bd31e33bb91aee417fc0efe_JaffaCakes118
Size

287KB
MD5

3dcd1a736bd31e33bb91aee417fc0efe
SHA1

dff21de99406ddbb99dca0e3714638e58f8ed0a4
SHA256

4acb30156b4d14297bbbd91ad132dfe88dec7f5066b19268150ef8047405cdd6
SHA512

abc533654ed6720dc0d0115e4c38b1d86d1168313a5e9fca405ec65cc1d6e1563f42c710e43f022d94187129f453fb0078dcee53dc2a1f462e4e982cff1eecc6
SSDEEP

6144:T0FUZ322ZfgBbxxsr02tfA6fvLTxnv7TqZX:TgEyB01f9p7Tq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dcd1a736bd31e33bb91aee417fc0efe_JaffaCakes118

Files

3dcd1a736bd31e33bb91aee417fc0efe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1e6997b0adacb9bf15866973bcb1ec0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateMutexA
CreateThread
EnterCriticalSection
ExitThread
FreeLibrary
GetTickCount
GlobalAlloc
InitializeCriticalSection
IsBadCodePtr
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalUnlock
ReleaseMutex
SetErrorMode
SetEvent
SetFilePointer
Sleep
TerminateThread
WaitForSingleObject
WriteConsoleA
lstrcatA
lstrcmpiA
lstrlenA

user32

DestroyIcon
GetDlgItem
GetMenuItemInfoW
IsWindow
MessageBeep
MessageBoxA
PeekMessageW
PostThreadMessageW
SetRectEmpty
UnregisterHotKey

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 970B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 273KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ