3bd2b3ea78347499ac87d85098a885b7_JaffaCakes118 | Triage

Sharing

General

Target

3bd2b3ea78347499ac87d85098a885b7_JaffaCakes118
Size

751KB
MD5

3bd2b3ea78347499ac87d85098a885b7
SHA1

21f242e1218b4df7b6f3f58c85fc5765f1ccaaaf
SHA256

591075e9d2c5d6c8f1f15b93a43d5ed9456e8c76b13a51e35ca8ce50e01a616b
SHA512

f4c845e85c3faadeb0d65cbeb12b665827e6d9000ce8e45ee07e1ffe0c1f80614a5dfbc22d22a2cf4d7cff13e7089eb7fe87f5aaa2ddd0210e7245c29f25c61b
SSDEEP

12288:GU4aAR5a7lOF8YOMIGeM/3Hifa7Wu50kr57EPo59og4urQQ8u6w:G+AKEF8OIKPOqEjg4uH6w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bd2b3ea78347499ac87d85098a885b7_JaffaCakes118

Files

3bd2b3ea78347499ac87d85098a885b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29a598d122d08f309dce2cad31c7b8b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
FindClose
RemoveDirectoryA
GetStartupInfoW
VirtualAlloc
Sleep
WaitForSingleObject
GetModuleHandleA
OpenProcess
CreateFileA
WaitForMultipleObjects
ExitProcess
GetFileAttributesA
ResetEvent
GetCommandLineW
GetEnvironmentVariableW
GetCurrentDirectoryA
CloseHandle
GetStdHandle
CreateMutexA
CreatePipe
GetConsoleTitleA
HeapSize
GetTickCount
SetLastError

user32

DispatchMessageW
GetDC
FindWindowW
DispatchMessageW
GetSysColor
MessageBoxA
CallWindowProcW
GetWindowLongA
GetClassInfoA
FillRect
GetDC
PeekMessageA
GetDC

ureg

??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 745KB - Virtual size: 745KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ