3e08226f0aee6c34a084883e65ccf777_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e08226f0aee6c34a084883e65ccf777_JaffaCakes118
Size

810KB
MD5

3e08226f0aee6c34a084883e65ccf777
SHA1

73777894f89b743ce7b1835330c1c1d3586134be
SHA256

700272662e6487e6fd42535f2107f676617e2deb11163faa02cd69a1eed6ae19
SHA512

cde3803e1cc286efda45fc2454283e0cd52dbeb9d35198a3cde00c874f45a096c0d6cdf71fd4f79cd3051b9bdd3974d4b7e54246eede941718d67871964f942f
SSDEEP

24576:j/lplkkkDAQF0oTPah5RpyUBJ+1DHVPscYA:3mzk5h5RIb2cYA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e08226f0aee6c34a084883e65ccf777_JaffaCakes118

Files

3e08226f0aee6c34a084883e65ccf777_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b08f4d9ae03d8959ba4e3605698f319

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomA
TlsGetValue
MapViewOfFile
GetTickCount
FindClose
GetPrivateProfileIntA
GetLocalTime
TlsAlloc
GetFileAttributesA
GetModuleHandleW
GetComputerNameA
lstrlenW
ExitProcess
CreateFileMappingW
GlobalFree
VirtualAlloc
SetLastError
GetStdHandle
GetLastError
CloseHandle

user32

GetMenu
FillRect
GetDlgItem
EndDialog
CreateWindowExA
DispatchMessageA
GetClientRect
GetClassInfoA
DestroyCaret
GetCaretPos
CloseWindow
CallWindowProcA
DrawStateA

cryptui

CryptUIDlgCertMgr
LocalEnroll
CryptUIDlgSelectStoreA
CryptUIDlgSelectCA
WizardFree

ir50_32

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 801KB - Virtual size: 800KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ