3e659df1dd2fa575798321362671e59a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e659df1dd2fa575798321362671e59a_JaffaCakes118
Size

59KB
MD5

3e659df1dd2fa575798321362671e59a
SHA1

9eb0c3719c5cd1ce87de6855f57a3fef375910fd
SHA256

43e66cb98b890ac043f6f073efbb59421d35f46a29761914ab9a3e3d59233f06
SHA512

2a00f698c7ad29202b3df1acf6b7c40dfa4068280d8aa569fe32fbc08172657e816ccae2d389c7545d20d7a7bd3ca3f4ed6ab7afc4d3cfddc04787227fec7f3d
SSDEEP

1536:tl2HQozpn2kejyH6en2gyM9DykydR1vz9L:ewcBwjJOykyNR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e659df1dd2fa575798321362671e59a_JaffaCakes118

Files

3e659df1dd2fa575798321362671e59a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1d448f27f7de837285abb9de9358b67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
SetBkMode
SetTextAlign
SetTextColor
SetBkColor
DeleteDC
ExtTextOutW
SelectObject
CreateCompatibleDC

kernel32

GetCommandLineA
FreeLibrary
GetProcAddress
GetStringTypeA
LoadLibraryA
WideCharToMultiByte
DeleteFileA
GetFileAttributesA
GetTempPathA
GetTempPathW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetFileSize
LockFile
LockFileEx
UnlockFile

oleaut32

SafeArrayDestroyDescriptor
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteW

msimg32

TransparentBlt

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE