3dd3ae12bab0497650e6e820dce31241_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dd3ae12bab0497650e6e820dce31241_JaffaCakes118
Size

39KB
MD5

3dd3ae12bab0497650e6e820dce31241
SHA1

2ea98594a8c4ee97806ef740e28ef5e7acc9d147
SHA256

ca41ab609e4331efa2dc40805bbcc100ccb15b760552d14a8777d81a5d482673
SHA512

dde2091a0cdb45b10cbff30f4f3fc368068203ab14815f891167b66b555778ce773a77b8d2d14d9dbaffa5d67a13151459faa4cfacc745193b072b09e5883055
SSDEEP

768:afr6USD789dee7YBI5QXsltGWKNmMBWIYPn/:afOUSD7M7lE50MQn/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dd3ae12bab0497650e6e820dce31241_JaffaCakes118

Files

3dd3ae12bab0497650e6e820dce31241_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90218010fbad8051919200339a757253

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
EndMenu
IsCharUpperA
LoadCursorA
LoadImageA
MessageBoxA
DrawMenuBar
OemToCharA
OemToCharBuffA
RegisterClassA
SetCursor
ShowCursor
DestroyCaret
CreateMDIWindowA
CreateIconFromResourceEx
CreateIconFromResource
CreateDialogParamA
CreateDialogIndirectParamA
CloseWindow
CharUpperBuffA
ActivateKeyboardLayout
MessageBoxIndirectA
wsprintfA

kernel32

SleepEx
FreeResource
RtlUnwind
VirtualFree
CloseHandle
SetCurrentDirectoryA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 23KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ