3dde8882a88c4c1828834b5e814c6256_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dde8882a88c4c1828834b5e814c6256_JaffaCakes118
Size

23KB
MD5

3dde8882a88c4c1828834b5e814c6256
SHA1

821ff6d7976af51638b3dc251fec74290bac7265
SHA256

9aefa506f1bb75101510a030d51134acbdbf8157314aa86987d6ce722ef7003a
SHA512

d12fea05338f395f74e5e2a732f6588d16ecb3175d843a22863e779c77827b0920a6f2bb045d62a8c38c404d1b6281e4f2c380a6c56d46618fbe4c9e9c3857cd
SSDEEP

384:guRlMpuKIPxjvMvpY3jl4AAIHxyVf7jaiIGWXJd8UdmIv4LwtR:gcDKKdvyyzlYIRyVfjnJW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dde8882a88c4c1828834b5e814c6256_JaffaCakes118

Files

3dde8882a88c4c1828834b5e814c6256_JaffaCakes118
.exe windows:4 windows x86 arch:x86

74a6cce7d9ef4aff16a0d60523fbf5dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetLastError
GetModuleHandleA
GetCommandLineA
ExitProcess
LoadLibraryA
GetProcAddress
Sleep
FreeLibrary
RtlZeroMemory
RtlMoveMemory
CreateFileA
WriteFile
CloseHandle
TerminateProcess
GetSystemDirectoryA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
FlushFileBuffers
OpenFile

user32

GetDlgItem
SetFocus
EndDialog
SendMessageA
SetDlgItemTextA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ