3b029db3806890069bb0ef4e0e1c90ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b029db3806890069bb0ef4e0e1c90ad_JaffaCakes118
Size

76KB
MD5

3b029db3806890069bb0ef4e0e1c90ad
SHA1

e09ceebdc863299925a2064915f32b019ee338b6
SHA256

278feb7aa712a8d01572316d8162ff253beb7c199d2434563a9704ef94f0e814
SHA512

fb3a58cd58a4a8d1d423a7547bdf8071ac60f31c109f157dff04df2fce2429edf675c04b5e05a19a8781627164cd5e3b62380d3c4d45712c293cfb221faa6806
SSDEEP

1536:I92mksO3i6uOb7SL/0mO/yZa78JemIAdPQ:Vtpy63HSLuGsm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b029db3806890069bb0ef4e0e1c90ad_JaffaCakes118

Files

3b029db3806890069bb0ef4e0e1c90ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1bba10fa4d80a375ac91b52b3042559

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetLastError
DeleteFileA
CloseHandle
LoadLibraryA
VirtualFree
TerminateThread
GetTickCount
GetProcAddress
VirtualAlloc
ResetEvent
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc

user32

MessageBoxA
SetFocus
GetDesktopWindow

Exports

Exports

?XMLPARSE@@YAKK@Z

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xcode
Size: 4KB - Virtual size: 399B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ