3afbe8d0d11d019dfa28a8cf2ad244ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3afbe8d0d11d019dfa28a8cf2ad244ba_JaffaCakes118
Size

814KB
MD5

3afbe8d0d11d019dfa28a8cf2ad244ba
SHA1

50ee28f90cbaf6857de8bf3abd44aa31be17ccfc
SHA256

e30dea698da5fd449a68ddade1179c8d6c9184d55fcc23988e39798d829691b6
SHA512

fcd6397592df91e780441c890ff1f0983b937f670c558328e19a5a7fecd73634315d980cbd1350f126415392dd2863e3bef6b77ab2b72c741cf512e4dd29883e
SSDEEP

12288:nUSPxrWdvLAQYn87wjkRnhXmX4qZL4Nv4O9/JFWxaBvULd4aMPXNBBQBDJmJ:P1KY87wY2IocNvX/JgcdRQBDEJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3afbe8d0d11d019dfa28a8cf2ad244ba_JaffaCakes118

Files

3afbe8d0d11d019dfa28a8cf2ad244ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72da0d8d615bc34f99be78e4b93d16da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreW
WriteConsoleA
GetCommandLineW
GetVersion
CloseHandle
HeapDestroy
OpenEventA
SuspendThread
GetStartupInfoA
ExitProcess
SetLastError
FindClose
CloseHandle
GetModuleHandleA
HeapCreate
DeleteFileA
FindResourceExA
Sleep
GetEnvironmentVariableA
lstrlenW

user32

GetWindowLongA
CreateIcon
DispatchMessageA
DispatchMessageA
GetClassInfoA
GetKeyState
GetSysColor
FindWindowA
IsZoomed
CallWindowProcW
DrawTextW
PeekMessageA
SetFocus

docprop

DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 806KB - Virtual size: 805KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ