3c663fad82be493ec0b0ecb044a57600_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c663fad82be493ec0b0ecb044a57600_JaffaCakes118
Size

52KB
MD5

3c663fad82be493ec0b0ecb044a57600
SHA1

ba3f2a7f96b2df2574eff5a44979ada23b4d6764
SHA256

379d29e8cb915418247082c44d2143b4188888f1c5e06aa50fd559a2b8887737
SHA512

1df0ca486a104dc1cb1d2e0ea739775ffb0d1ab6cea86fa96f007947dacd6967b4ca4977f9c026271459e1ff1ddf799c570d0744fcc1acaa60965215a5e75dbc
SSDEEP

768:6Y9zdE8ncXGc2XVehs9MKOLmx9hct6PHP8WVmR:n9BEgcd2dMKcC9hctCHP8W8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c663fad82be493ec0b0ecb044a57600_JaffaCakes118

Files

3c663fad82be493ec0b0ecb044a57600_JaffaCakes118
.exe windows:4 windows x86 arch:x86

82cedb12d90ebc9b82cb1b1846446517

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
LoadCursorW
LoadIconW
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
SendMessageW
DestroyWindow
DialogBoxParamW
BeginPaint
DrawTextW
EndPaint
PostQuitMessage
SetFocus
EndDialog
CreateWindowExW

kernel32

GetTickCount
LoadLibraryA
CreateFileA
GetSystemDirectoryW
CloseHandle
CreateFileW
LoadLibraryW
GetStartupInfoA
ReadFile
GetModuleHandleA
GetCommandLineW

gdi32

CreateSolidBrush
DeleteObject
GetStockObject
SetTextAlign

comctl32

InitCommonControlsEx

shell32

CommandLineToArgvW
DragFinish
ExtractIconA

crtdll

_local_unwind2
_global_unwind2
_fmode_dll
_commode_dll
??2@YAPAXI@Z
_initterm
_acmdln_dll
exit
_XcptFilter
_exit
__GetMainArgs

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ