3c35022fc4cd14379d655c7ebf2a731c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c35022fc4cd14379d655c7ebf2a731c_JaffaCakes118
Size

242KB
MD5

3c35022fc4cd14379d655c7ebf2a731c
SHA1

58942a4e49dd06a6fd02b15589fd4c441380ca0c
SHA256

e861bcc61f6da31369015933f24defd14f176741b87dac6fc9f48c64b8d28c78
SHA512

4e25268c6107e0098c04aeefefa4cc5c70816fafbf85015a38787bae7a8d8bc91cc94a68b6599705c6ffdad6a9d7536041b0ae55a94f90b252dc284ad6c9215f
SSDEEP

6144:ziHLt7OgMrkHLD7COyRZDMtseXXtSSe6uW1aVSSR:z6tCd8LD7jPXXp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c35022fc4cd14379d655c7ebf2a731c_JaffaCakes118

Files

3c35022fc4cd14379d655c7ebf2a731c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df250fdfe4036c495e789f5efe4d41d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
SetErrorMode
GetWindowsDirectoryA
SetCurrentDirectoryA
VirtualProtect
ExitProcess

user32

SetForegroundWindow
GetClassInfoExW

Exports

Exports

Mjbjxdipx
AddEilsykh

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.secdata
Size: 8KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 231KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsec
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ