3a02078109e8431c7a78bcafe0516b3d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a02078109e8431c7a78bcafe0516b3d_JaffaCakes118
Size

22KB
MD5

3a02078109e8431c7a78bcafe0516b3d
SHA1

832d2e5daab53374293df032eac9beb42fa300ff
SHA256

eaf472a94c2bb582bea6ac53980bbd52a89954e351f84dfe801cf24055bf6802
SHA512

de348ccd72f1f36136558e2220b6ac1429d3c5795bcbd34cc40d8458b373e993439992dcd403400e52a97dbe62ae417775439a9154ad932416b16267a863e2ae
SSDEEP

192:pPqtCf/JMGxEdvwNkAX7K1zxxGqWw3lorZszddKZx9:pPqMyVqUHLWOlo1szXK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a02078109e8431c7a78bcafe0516b3d_JaffaCakes118

Files

3a02078109e8431c7a78bcafe0516b3d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17c2361bfbd5f79ba89427d17ef4cbad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
GetModuleHandleA
LocalFree
GetTickCount
GetCommandLineA
Sleep
LocalAlloc
GlobalFree
FreeLibrary
GetVersionExA
CloseHandle
GetStdHandle
lstrcpyA
GetStartupInfoA
lstrlenA
lstrcatA

gdi32

MoveToEx
GetBkColor
DeleteObject
SelectObject
SetROP2

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 981B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ