3b3dde22cc9a00265cbac3a8ddd1426f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b3dde22cc9a00265cbac3a8ddd1426f_JaffaCakes118
Size

21KB
MD5

3b3dde22cc9a00265cbac3a8ddd1426f
SHA1

627e64800b4334371f266c96782d9900ca4b6340
SHA256

c03a4684f7a8ee632a413da594b73de48d9ac3b162aab36cc6d97b0e6065df23
SHA512

dd494f259af16d9a3533e5ae65d20dcab2f7271795c5a2a4d7d673e590f1a02dd7f19bbb6ba7f0679a23d65ca5a087aabb4a08f6d7224269ee6c25b3968b523a
SSDEEP

192:yl4ueQyNWBWhMeIcqRCDH0bxO0nVNTECg07tev2+B:K4ueQymWhMPzCT0nVN007tT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b3dde22cc9a00265cbac3a8ddd1426f_JaffaCakes118

Files

3b3dde22cc9a00265cbac3a8ddd1426f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ceb546d356e05392ac3556b7c59428aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
GetModuleHandleA
LocalFree
GetTickCount
FreeLibrary
GetVersionExA
GlobalFree
GetFileSize
GlobalAlloc
LocalAlloc
lstrcpyA
GetStdHandle
lstrcatA
CloseHandle
lstrlenA
Sleep

msvcrt

__set_app_type
__p__commode
_initterm
__CxxFrameHandler
__p__fmode
_exit
_c_exit

gdi32

CreateSolidBrush
GetTextMetricsA
PatBlt
SelectObject
CreateFontIndirectA
LineTo
ExtTextOutA
GetObjectA
GetStockObject
GetBkColor
GetDeviceCaps
GetTextColor
CreateCompatibleDC
SetPixel
BitBlt

user32

LoadIconA
ShowWindow
ScreenToClient
CreateWindowExA
GetFocus
DestroyWindow
BeginPaint
EndPaint
DialogBoxParamA
EndDialog

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ