3ea0becac59f11c3ea1bf98db8d57e0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ea0becac59f11c3ea1bf98db8d57e0c_JaffaCakes118
Size

2.4MB
MD5

3ea0becac59f11c3ea1bf98db8d57e0c
SHA1

1eec2f5ce7d4ccce895493de5475b40eb974e77d
SHA256

3b1b7a412dd99c327f70053c98e8bb5335ccd6b8c0571627882a5b45c680142a
SHA512

6fe9c1a619b1402ca12af98f0fe1df112555836acdbb06f0b66013bb23a48b12099c47f1ae805394f11c1248e382cda84dd0310588caadc02cb075c617cbd48b
SSDEEP

49152:w1eIdlHBc8aXZJo2FQUNXMMbTdR9Zs6gE9jREW5qu:w1eIdDc8aXZ22e0hTdZsu9jREW5D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ea0becac59f11c3ea1bf98db8d57e0c_JaffaCakes118

Files

3ea0becac59f11c3ea1bf98db8d57e0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0860a70dfb649b203b6cb926e9e8874f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
ReadFileEx
CreateTimerQueueTimer
WriteFileEx
DeleteTimerQueueEx
GetConsoleWindow

user32

GetWindow
GetNextDlgTabItem

authz

AuthzInitializeContextFromSid

Sections

.text
Size: 715KB - Virtual size: 715KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 337KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ