3fefac6bfe5e62a27d389dfa3c73088c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fefac6bfe5e62a27d389dfa3c73088c_JaffaCakes118
Size

45KB
MD5

3fefac6bfe5e62a27d389dfa3c73088c
SHA1

a4388f6c6b44abf39ef52fd95d1d376c29bf45e4
SHA256

8d640c9c33b1d8a7a0436e69e61e8de931548fc8f9430270173f20dd981712da
SHA512

a7d9a3a5dc37e3c40fa5fb9c303ea1aa8649e9bdca24e01ac93567ef61303471850fa69e027ee691cd2dbc347ed9abb9e2f206551434f5c1b0d0ffc15fc20a4d
SSDEEP

768:MM2LaE6mQX7zOWdbBLHUilQKX0j4Ipw1lRNgdDfNEaObeoOdWyV/lu6Sl/:IJDKX0ci+2DfNEqoO5V/c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fefac6bfe5e62a27d389dfa3c73088c_JaffaCakes118

Files

3fefac6bfe5e62a27d389dfa3c73088c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0d5a15991fbbee70da0f6fdf7e75a36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
FindAtomA
lstrcmpA
lstrlenA
GetModuleFileNameA
lstrcpynA
CreateMutexA
CloseHandle
GetVersion
GetTickCount
GetTempPathA
GetSystemTime
WriteFile
lstrcpyA
GetCommandLineA
CreateProcessA
lstrcatA
GetLastError
GetProcAddress
VirtualAlloc
GetTempFileNameA
GetLocalTime
LoadLibraryA
OpenMutexA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
GetVersionExA
RtlUnwind
IsDebuggerPresent

user32

wsprintfA
ClientToScreen
GetCursorPos
GetCaretPos
EqualRect
GetWindowRect
IsWindowVisible
GetFocus
InflateRect

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE