3a8a9c0a990a9dcc64b763674b341259_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a8a9c0a990a9dcc64b763674b341259_JaffaCakes118
Size

64KB
MD5

3a8a9c0a990a9dcc64b763674b341259
SHA1

49ef1b929368df609e2140de0cd41d1fe59d9f15
SHA256

01d123ea98bccf4d50ac2e8f791fd326e6c8a5ad69a3f8fe9d7fb892fbcc39b2
SHA512

817fe88519c7c44326f0756883c9b73d928741552144af90cc23d56673cb53e954ed733214811476d1575054612d35e7c05bbe4e8700c7d889e92e1b5422609e
SSDEEP

768:2/HxI8utvEsON03pmLjfZSYBKvLz5QIArnWtuwJSydSb6lEBEVaLZ8Ami8RwTUAi:YRCtzAkYBKTq+FJSeKiG2g8iT2z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a8a9c0a990a9dcc64b763674b341259_JaffaCakes118

Files

3a8a9c0a990a9dcc64b763674b341259_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48f16a5932b5ef693e9b1dd849029fd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
OffsetRect
DialogBoxParamA
CreatePopupMenu
CreateMDIWindowA
CreateDialogParamA

kernel32

ExitProcess
lstrcatA
SetCurrentDirectoryA
MapViewOfFile
GetVersion
GetSystemTimeAsFileTime
GetStartupInfoA
EnumResourceTypesA
GetDateFormatA

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE