dc3986f91541ee1ba1ed17a9f29f374a_JaffaCakes118 | Triage

Sharing

General

Target

dc3986f91541ee1ba1ed17a9f29f374a_JaffaCakes118
Size

250KB
MD5

dc3986f91541ee1ba1ed17a9f29f374a
SHA1

3992f56f5600cc7e1faf031b6eadda12ee19ec22
SHA256

ccdc02d584e0b0453c942f3eaa32c4ca7137d9f728fa5f7f8da11950d7efc5f5
SHA512

68239707562b51c3363f059073d6264ede8ff470a991d8842324f11506b31b9e1051abcebf5f5f3d720e93c1e1949f8b6312567e0b34e9310d4db0d953cec225
SSDEEP

6144:ZVjyMBgO5x+zkrnK89PpR1kIbZNG2cj/KJJjf:ZgEgOlK89Pp8ILrWCt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc3986f91541ee1ba1ed17a9f29f374a_JaffaCakes118

Files

dc3986f91541ee1ba1ed17a9f29f374a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7cee5a65ca47cb5ee389b0cab418ed93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
TranslateMessage
ShowWindow
SendMessageA
RegisterClassExA
PostQuitMessage
LoadIconA
LoadCursorA
GetMessageA
DispatchMessageA
DefWindowProcA
CreateWindowExA

kernel32

GetProcAddress
LoadResource
LoadLibraryA
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcatA
WriteFile
SizeofResource
SetFileAttributesA
RtlMoveMemory
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetCommandLineA
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GlobalFree
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
GlobalAlloc
LockResource

shlwapi

PathFindFileNameA
PathFindExtensionA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE