3fb118cd9c1d3aff809b80828995b379_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fb118cd9c1d3aff809b80828995b379_JaffaCakes118
Size

32KB
MD5

3fb118cd9c1d3aff809b80828995b379
SHA1

f8195047ef7bf0e58f2f0072378990c4efb45f93
SHA256

95d8dde5db5ca1d29c60ca43f2fa3157cb9656e45a2e65f57741dd1076f70d98
SHA512

2f344f7e6fbf382f89014e507a6f55bae1800f66b9a3ad4fafb18ab8263b905f5d451eb199f87d8305bce4a189bc70daa00e37a17661b7dbe9de33e5fe00dced
SSDEEP

768:JBZK91RnYJsy2Roew0/sGB2dHb3BtaCQZIrfZud6L:4jhLy9ewUs/h3BtaCQ0fZzL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fb118cd9c1d3aff809b80828995b379_JaffaCakes118

Files

3fb118cd9c1d3aff809b80828995b379_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df7cec689f6d0047a93627d9abfdcb30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
InterlockedExchangeAdd
RtlZeroMemory
GetModuleHandleA
lstrcpyA
lstrlenA
GetCommandLineA
FreeLibrary
VirtualAlloc
ExitProcess

gdi32

DeleteObject
CreateSolidBrush
SetBkMode

user32

BeginPaint
DefWindowProcA
DispatchMessageA
EndPaint
FillRect
GetClientRect
GetDesktopWindow
GetMessageA
GetWindowRect
InvalidateRect
LoadCursorA
LoadIconA
MoveWindow
PostQuitMessage
SetFocus
TranslateMessage

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 201B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ