3e22b869eb45ed036046589c762b077c_JaffaCakes118 | Triage

Sharing

General

Target

3e22b869eb45ed036046589c762b077c_JaffaCakes118
Size

20KB
MD5

3e22b869eb45ed036046589c762b077c
SHA1

42ff0dd688982a4b1fa90f07f0225e991d596545
SHA256

5a54ab67996939223f2b2d3ede7bead6c5b8b3854b67f614e343760e18424efe
SHA512

fcf1fa0e10b553b0a629045231b4d382dc0f2f7cc7bd4a1b56c963fb133bbdbc90e79fdf294a13b113b0a4ed1183bfd074a8f21feade860a059d0484050d9e0c
SSDEEP

384:Q3LYvptw9ARAkKKkMusfghNUXAIiR6wo7MCngLSUopboX6LQS:GqpEJkKCgzUXDPA1LSfqX6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e22b869eb45ed036046589c762b077c_JaffaCakes118

Files

3e22b869eb45ed036046589c762b077c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f2613be9335bf616085cd9236dd6f936

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateMutexA
GetLastError
RtlZeroMemory
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
lstrlenA
LoadLibraryA
GetProcAddress
CreateFileA
WriteFile
FlushFileBuffers
CloseHandle
GetTickCount
ReleaseMutex
FreeLibrary
ExitProcess
TerminateThread
TerminateProcess
CreateThread
ExitThread
GetSystemTime
GetDateFormatA
GetTimeFormatA
GetSystemDirectoryA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetFileSize
ReadFile

advapi32

CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDestroyHash
CryptEncrypt
CryptDecrypt
CryptDestroyKey

ws2_32

WSACleanup
listen
accept
shutdown
closesocket
recv
send
WSAStartup
htons
socket
bind

dnsapi

DnsFlushResolverCache

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ