3e30535575fc9ab9b835bffa38b31763_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e30535575fc9ab9b835bffa38b31763_JaffaCakes118
Size

334KB
MD5

3e30535575fc9ab9b835bffa38b31763
SHA1

b98dcdc7243bbbeecee188df9df0601231513b3b
SHA256

a057269f70cff5ca2c41f04d9b295971bec56d9b59f8ac9a2afb82e3b2621656
SHA512

9ae75df62cd8a658503a9ad381d176bd6214eb821d1dd05d8b585829faa339be5a520d200e9c17f879e034623348701be80cece981ef640d7a483f60f1734d10
SSDEEP

6144:V5AXOZNyD7dzY6VnCRK0Nt1Koif1D+yfHXw2rh4Uy3Gw5j5sxu/0S3abHGuIGahj:6PVCI0rIoUpP/5rKFrV3aHGu1a/ES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e30535575fc9ab9b835bffa38b31763_JaffaCakes118

Files

3e30535575fc9ab9b835bffa38b31763_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1fa41cf47b69c53e4866d90d7d1d5bf9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
GetModuleHandleA
lstrcmpW
CreateFileA
GetDiskFreeSpaceW
ReleaseMutex
GetComputerNameA
SetLastError
FindAtomW
GetTickCount
GetFileAttributesW
HeapCreate
SetEvent
GetCommandLineW
CreateThread
GetDriveTypeA
GetSystemTime
LoadLibraryW
LocalFree
CloseHandle

user32

SetFocus
GetKeyState
GetDlgItem
DestroyCaret
DispatchMessageA
CloseWindow
DrawStateA
GetClassInfoA
FillRect
CreateWindowExA
GetClipCursor
CallWindowProcA
GetComboBoxInfo
MessageBoxA

cryptdlg

CertConfigureTrustA
DecodeRecipientID
CertTrustInit
CertTrustFinalPolicy
CertTrustCertPolicy

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 322KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ