3b5a32db43b1835171d9fdbfa6f7523c_JaffaCakes118 | Triage

Sharing

General

Target

3b5a32db43b1835171d9fdbfa6f7523c_JaffaCakes118
Size

137KB
MD5

3b5a32db43b1835171d9fdbfa6f7523c
SHA1

3ca7e379e1b69381a1b000fed3172984449a726f
SHA256

4a57793ae95c6b8c7bbdc7b1b2d501e895355adf715d09ff8a17fedcacc7c540
SHA512

6d0e11fe6335d1c1def38e557166e6513dc5c522430a3d1288fa67f35bac5036b6ea50e3b9768078e60c46828468b66218d8397f4d22a95d5428426d59eda495
SSDEEP

3072:M5+/NceH/nSrDBN5XJiBLat67RJcbwxcZ+SLmogbfUd:M5+eeHoDH5QBL37RJcbwWlCoSfQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b5a32db43b1835171d9fdbfa6f7523c_JaffaCakes118

Files

3b5a32db43b1835171d9fdbfa6f7523c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7fcd23b634b6a4874abe13dc082fce78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

ChrCmpIW

user32

GetWindowDC

kernel32

GetCurrentDirectoryW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rt_ecx
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_eax
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_esp
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_edx
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_ebx
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ