a3b6346fc497dac3bb8caa2f51b7cb25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3b6346fc497dac3bb8caa2f51b7cb25_JaffaCakes118
Size

34KB
MD5

a3b6346fc497dac3bb8caa2f51b7cb25
SHA1

a0c1791a6be1ff8fc7324a3f297a9c9fd9bdbd14
SHA256

7eb0009a01ff92156d62d80c8e41c64f152fc75f709c70e04457138bc61e7195
SHA512

02221467a332fc090d32c794c4630e16e2cd8058b05902f284f34168ffd7951bf8536ad4df051c81b9b0e98bf0fb22f8a1f3096122db629b7858ea39696dd55d
SSDEEP

768:iEP3KnEG69o5TpLJERiDcBCb0AxRKYjVnEFJYy/8+:dinX694TBJEiDaa0AKR8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3b6346fc497dac3bb8caa2f51b7cb25_JaffaCakes118

Files

a3b6346fc497dac3bb8caa2f51b7cb25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d3e997205934ad0ba205ad6468c948b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SleepEx
SetFileAttributesA
LoadLibraryExW
SetSystemTimeAdjustment

ntdll

RtlQueryHeapInformation
RtlApplyRXactNoFlush

user32

MessageBoxA

ole32

ReadStringStream

gdi32

CreateRectRgn
CreateDiscardableBitmap
SetMapMode
SetLayout
SetICMProfileW
SetDCPenColor
RealizePalette
PtInRegion
MaskBlt
GetTextColor
GetStretchBltMode
GetClipRgn
GetBkColor
FrameRgn
DeleteDC
CreatePatternBrush

appmgmts

CsEnumApps

hid

HidD_GetIndexedString

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ