3dd3812a5b008c6418d09192777b9600_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dd3812a5b008c6418d09192777b9600_JaffaCakes118
Size

142KB
MD5

3dd3812a5b008c6418d09192777b9600
SHA1

1e44330116e10e270fb1cab7b5d45c6837939025
SHA256

e28a874e33def4dc4f2470381607460b8231deee0e8d5d569359132c1b11585e
SHA512

b81b1cfadd41bd8501f3607b5708316a469abd4e99ecdad07010c692391b409efad013125806092bf1d57ba7d5a762b26b1da11e32ef710690056cef69145946
SSDEEP

3072:vD3tFCFtuUAtMv4yTEnQ3m8xT2tvyVOIIouBm8MofG4ljbJy26:vD3OFtPAKQZQ3m8xTVwmn+lc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dd3812a5b008c6418d09192777b9600_JaffaCakes118

Files

3dd3812a5b008c6418d09192777b9600_JaffaCakes118
.exe windows:4 windows x86 arch:x86

31d314630af2b61d7339eb8204585ed8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateConsoleScreenBuffer
GetLongPathNameA
SetLocalTime
Sleep
AllocateUserPhysicalPages
FindClose
SetErrorMode
GetConsoleCP
FindNextFileA
CreateConsoleScreenBuffer
TlsAlloc

user32

OemToCharBuffA
GetAsyncKeyState
LoadStringA
GetThreadDesktop
MessageBoxIndirectA
SetDlgItemTextA
ChildWindowFromPointEx
SystemParametersInfoA
BroadcastSystemMessageW
DdeCreateStringHandleW
DdeAbandonTransaction
DdeUninitialize
SetSysColorsTemp
InvalidateRect
RegisterClassExW
WINNLSEnableIME
ChangeDisplaySettingsW

shell32

SHGetIconOverlayIndexW
SHGetDesktopFolder
DoEnvironmentSubstA
Shell_NotifyIconA

gdi32

GetDCPenColor
GetBkColor

Sections

.text
Size: 9KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ