db3bd4c6872f9b1b74cb1253405c7cfb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db3bd4c6872f9b1b74cb1253405c7cfb_JaffaCakes118
Size

92KB
MD5

db3bd4c6872f9b1b74cb1253405c7cfb
SHA1

4124aca911e155577ce974490d874e5e8e5e8415
SHA256

3260a293622d819ab313386c0a61ba5f0e67e501cfa92ae55bf37cd146f81dc6
SHA512

519fa6efabc10c95e81dd86c6afdd03e22af54604e1e6b1b10569436fcaa90b3f626281840b4aece11aaa70b5e00a9d76631da8edb3e6506a8b06ceb5e8947f4
SSDEEP

1536:eu03seiGhstDRs6i+SFwCJb+SIJ9hNvJ65ODo3I1wxKka/T52Mg7jV1Q6/+3fF8C:03TctDC6Sa0bNIJ7Nx65OJ1wU50p17+B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db3bd4c6872f9b1b74cb1253405c7cfb_JaffaCakes118

Files

db3bd4c6872f9b1b74cb1253405c7cfb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

409c42c1e20c6cee863807f9b58737e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EmptyClipboard
DestroyMenu
DestroyCursor
DestroyCaret
CreateIconFromResourceEx
CloseWindow
CharUpperA
CharNextA

kernel32

GetStartupInfoA
lstrcmpA
VirtualFree
TlsGetValue
TlsFree
RtlUnwind
ReadFile
OpenFileMappingA
MapViewOfFile
CompareStringA
ExitProcess
FreeResource
GetLocalTime
GetPrivateProfileStringA
GetTimeFormatA
InitializeCriticalSection
LoadResource
LocalAlloc

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE