3e2dff06c2a1627d9451cab8230bd529_JaffaCakes118 | Triage

Sharing

General

Target

3e2dff06c2a1627d9451cab8230bd529_JaffaCakes118
Size

384KB
MD5

3e2dff06c2a1627d9451cab8230bd529
SHA1

64020f2e4023c51428cdbae2f0774e69edd99f49
SHA256

9db2c2d0a573c0ff0406be64feab6e82122330979e92902284d408d61d3ea45a
SHA512

93684ee8f541cf7908b59d2961447d5614dafcc41e552ddc81572329a400747ba8c1c59bcd93798bc5cae398904506ecfe3147c10b17fa5d087e5e6417ad131e
SSDEEP

6144:JphLRF3f1Q+qFPy1XMgjRbYcyYwVv9xDZKiE3vfbHMv:DhTv19qFPkX5jRbYcgv9xDZKr3vT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e2dff06c2a1627d9451cab8230bd529_JaffaCakes118

Files

3e2dff06c2a1627d9451cab8230bd529_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5fccaf11b7475a2043a26d86c28d92d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FindClose
GetModuleFileNameA
GetSystemDirectoryA
GetSystemTime
OpenSemaphoreA
GetLastError
SetFileApisToANSI
VirtualFreeEx
Sleep
WaitForSingleObject
ResetEvent
GetCurrentThread
GetModuleHandleA
TlsAlloc
GetProcAddress
GetProcessHeap
WaitForMultipleObjects

user32

OpenIcon
ShowWindow
GetLastActivePopup
IsChild
LoadCursorA
InSendMessage
DrawTextA
IsZoomed

advapi32

CopySid
AddAce

ole32

CoUninitialize

psapi

GetModuleBaseNameA

avifil32

AVIStreamCreate

msvfw32

DrawDibOpen

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 332KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 12KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ