3ae06cbcf9016d1387a5fe6de2bdfda4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ae06cbcf9016d1387a5fe6de2bdfda4_JaffaCakes118
Size

94KB
MD5

3ae06cbcf9016d1387a5fe6de2bdfda4
SHA1

04b8771d530f45988651a55f272fae17a40df15f
SHA256

d29cfadecf30fedee5448993bf02d2f33043d369f5b6190af723beaa62b3d670
SHA512

b04f634754007189ee00e3f181dab648fecd4f386583c79758afd11ecfedf48c6f6d3f78cdcb105e60384f32308357b6d218a871c58110653b33f6e029575e0e
SSDEEP

768:O5KQYLsdEvEGfKFnvVwkn29Oe3Ew0G49BYDpOW9Z0JF9YPolONzSn6ky15+pqkbH:36rl2DUOaaoxJF9YPol4zU6kysp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ae06cbcf9016d1387a5fe6de2bdfda4_JaffaCakes118

Files

3ae06cbcf9016d1387a5fe6de2bdfda4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

772d59e43070c991613db02005791ab7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryInfoKeyW
RegOpenKeyExA
RegEnumKeyW

kernel32

DeleteFileA
CopyFileExA
GetCommandLineA
ExitProcess
CompareStringA
lstrlenA
FormatMessageA
GetLastError
FlushFileBuffers
GlobalFree
GetCPInfo
HeapFree
lstrcatA
CopyFileA
FreeResource
GetFileType
FindClose
OpenFile
OpenFileMappingA

user32

AppendMenuW
GetFocus

Sections

.h0ha3
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.2fgb2
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0hb84
Size: 55KB - Virtual size: 426KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ge458
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ