3f6dcba58e80c7fd6ea0af943268b4dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f6dcba58e80c7fd6ea0af943268b4dc_JaffaCakes118
Size

192KB
MD5

3f6dcba58e80c7fd6ea0af943268b4dc
SHA1

fa4b881baa2f08063218bebd9aaf95bec55f9eee
SHA256

1de64b59cc5d2c2fe188418238c5ac449b13d87ef7e7551e0204a3b906ba3c3a
SHA512

701b3714cd9fb74cf5ef37e62903ecf7cf7e5c3594fa08d5d80c898aa8f839bcc93a2e2917fb67f0a3c7cc9228b69e458808885926f7963fcbc8b0fcd8e5fe18
SSDEEP

3072:f8dRSqCPdygCm9D82b1PlLyWaA3Xtr8iBCMWOCfq+90Cn4NZyRormnTSFXSWe/0Z:f8Szd902b18AntrFBCMoyS0Cn+4okTSt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f6dcba58e80c7fd6ea0af943268b4dc_JaffaCakes118

Files

3f6dcba58e80c7fd6ea0af943268b4dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d6045137a9a69cd9678621e3aec62e03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetWindowInfo
MessageBoxW

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

CreateTapePartition
ExitProcess
ClearCommError
LCMapStringA
EnumResourceNamesA
ExitProcess
LCMapStringW
GetCPInfo
GetModuleHandleA
GetProcAddress

Sections

.text
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ