3af861d542e9c8c6e3db6cfd71c197da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3af861d542e9c8c6e3db6cfd71c197da_JaffaCakes118
Size

118KB
MD5

3af861d542e9c8c6e3db6cfd71c197da
SHA1

db3a9a250655b80faa701b448113db942116460f
SHA256

0642b986d8abcfe28d763ed7bcd806327c38a173aea0175502490dc52a6f5bb7
SHA512

7581ac6035ceb76d69e6a615bf35ae6df221e00c12e976a47ad32fa9ede96cf5ab37d485f88d5c91eda249b4fe5817d7a0d731e763cca2c55f084ff8e508e247
SSDEEP

1536:hTfE12r+mCyUl2XdESP1w06O82sMf/CxrsWD+BPbhuvTuf+yTHC/6G3j7K:hInl2Xn1GLD+BjgvhqHk6GT2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3af861d542e9c8c6e3db6cfd71c197da_JaffaCakes118

Files

3af861d542e9c8c6e3db6cfd71c197da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8529b3fdbd06799197c88fef59ae6afa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GlobalFlags
GetPrivateProfileStringA
LoadLibraryA
FlushViewOfFile

user32

ToUnicode
DefDlgProcA
CreateDialogParamA
GetWindowRect
IMPSetIMEA

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 351B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 397B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 514B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ