3fae2291fcfdb852d4f44f57fe5ba05d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fae2291fcfdb852d4f44f57fe5ba05d_JaffaCakes118
Size

44KB
MD5

3fae2291fcfdb852d4f44f57fe5ba05d
SHA1

8c39df2d449319ccc307202e332b01df2d9ea4ed
SHA256

fa2db86d81c01a259fe7dc1c7a2f5ca2e7a7436ca1efd75e1c2888722fbaf9e5
SHA512

ab29923f13f56fb23f2df7b8f59319477ea0680dc02cfcf009ead4a5b463cbabde5ecf1918eda5663d6baad51e9b961dae7a9c1fbe73927608b0a95ecf77ce21
SSDEEP

768:U3+q303xVTW7zaK0sWpxPjPl/rVfeFvTuz3jhsnqT78cFe8LkFv4UTqR05dzCF2:U3+q303xdmWT7ZFeFu3GnqT78gxuNqR4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fae2291fcfdb852d4f44f57fe5ba05d_JaffaCakes118

Files

3fae2291fcfdb852d4f44f57fe5ba05d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0d5a15991fbbee70da0f6fdf7e75a36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
FindAtomA
lstrcmpA
lstrlenA
GetModuleFileNameA
lstrcpynA
CreateMutexA
CloseHandle
GetVersion
GetTickCount
GetTempPathA
GetSystemTime
WriteFile
lstrcpyA
GetCommandLineA
CreateProcessA
lstrcatA
GetLastError
GetProcAddress
VirtualAlloc
GetTempFileNameA
GetLocalTime
LoadLibraryA
OpenMutexA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
GetVersionExA
RtlUnwind
IsDebuggerPresent

user32

wsprintfA
ClientToScreen
GetCursorPos
GetCaretPos
EqualRect
GetWindowRect
IsWindowVisible
GetFocus
InflateRect

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE