3c5e49ec92d70dc68484d0f64c683001_JaffaCakes118 | Triage

Sharing

General

Target

3c5e49ec92d70dc68484d0f64c683001_JaffaCakes118
Size

120KB
MD5

3c5e49ec92d70dc68484d0f64c683001
SHA1

31324c2a2e5b53851deb81d16da797bbe8784106
SHA256

1e401685de3e68f36b8caa398c747373e5acb3909735780aed8c3b65922f1ffb
SHA512

6c1eb4ec9b69b12d05771ee137561b65a98abe611b2c4fc4718c6a2ad7e2d02f156eba869b51f05113db327ba3c5b0615ae331680f22ea70b8c216d048e5701f
SSDEEP

3072:5tI92RAg17CwLlz8luFAbaGXvQApuaLNWDl:s9EAg17CwLxp0aGX3YhR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c5e49ec92d70dc68484d0f64c683001_JaffaCakes118

Files

3c5e49ec92d70dc68484d0f64c683001_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2883a26b9095343792f6912013a502c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
GetVersion
lstrcatA
lstrcpyA
lstrlenA

user32

AppendMenuA
CheckMenuItem
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DestroyIcon
DestroyMenu
DispatchMessageA
FindWindowA
GetCursorPos
GetMessageA
GetSystemMetrics
IsWindow
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassA
SetForegroundWindow
SetMenuDefaultItem
TrackPopupMenuEx

advapi32

RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

shell32

ShellExecuteA
Shell_NotifyIconA

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 105KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ