3bc2b49b55512c6ddc98c083e787fecc_JaffaCakes118 | Triage

Sharing

General

Target

3bc2b49b55512c6ddc98c083e787fecc_JaffaCakes118
Size

572KB
MD5

3bc2b49b55512c6ddc98c083e787fecc
SHA1

70041ecec7c32db2a765579ce9622f940da40614
SHA256

9fadfc928605c6519c09c6c85bad104b1e28b76ad5299442b3bf4eabe448b7b1
SHA512

dfe72f58033acdfa58d60df03d37a6e5f231af0cad681394ccf5ccf2fbeffbef52a8e60e8bf7b744ff6f97a5fe6bdd25e9c0e0cdc309a0f442e36f7e2997bc23
SSDEEP

12288:P0xTYWn7x7jGWaNOwd6oLuLlIIvw6B0whhaqZ0h7lNridp6apk+Rcir:P5WnRONnoLYSkH6R1Rzr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bc2b49b55512c6ddc98c083e787fecc_JaffaCakes118

Files

3bc2b49b55512c6ddc98c083e787fecc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ae146403d7d141006e391eceba16fb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
SetLastError
HeapAlloc
CreateFileA
GetLocaleInfoA
SetEndOfFile
TlsGetValue
FindClose
FindResourceW
HeapCreate
TerminateProcess
GetACP
CloseHandle
TlsSetValue
CreateThread
GetProcAddress
Sleep
UnhandledExceptionFilter
GetCPInfo
DeleteFileA
GetEnvironmentStrings
GetStartupInfoA
FreeEnvironmentStringsA
RaiseException
GetModuleFileNameA
GlobalUnlock
InterlockedExchange
GetTickCount
IsDebuggerPresent
MulDiv
HeapDestroy
GetConsoleCP
LoadResource
ReleaseMutex
GetStdHandle
GetProcessHeap
ExitProcess
GetCommandLineA

user32

GetFocus
FillRect
GetSubMenu
ScreenToClient
GetDlgItem
SendMessageA
CheckMenuItem
GetDC
GetSysColor
EnableWindow
GetSystemMetrics
BeginPaint
UpdateWindow

Sections

.text
Size: 488KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE