3c1311d26903fff6fe7cf49aec5372fa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c1311d26903fff6fe7cf49aec5372fa_JaffaCakes118
Size

232KB
MD5

3c1311d26903fff6fe7cf49aec5372fa
SHA1

123f59a0ed7600d8d012f8e0680854c5ce003a2e
SHA256

f54ef00a05745384f0701465dc222cdb76ccfa3d3cc1f90aa7e997a6cc9fd34b
SHA512

112b43d9305276e16247e5d5524c170bae675f44bf8d9418cf797be592c053e0f2d92fec83e8e1325b2b597d9ca4e00ef969c8aaf6b2956fbc7f313868b4e493
SSDEEP

6144:QshczSK0xst01yWrWfZFykIn/dTTl+nqQp6SCDNYnrHm:QXzpm1ZSfZFWVQcSfnDm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c1311d26903fff6fe7cf49aec5372fa_JaffaCakes118

Files

3c1311d26903fff6fe7cf49aec5372fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

70ea638d3d9cb0834a7a7244e9f36977

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
GetEnvironmentVariableA
SetLastError
GetFileSize
AddAtomA
HeapCreate
ExitProcess
SuspendThread
WaitForSingleObject
FindClose
ResetEvent
GetStartupInfoW
HeapDestroy
GetTickCount
CreateFileA
InitializeCriticalSection
GetCurrentDirectoryA
HeapSize
GetSystemInfo
DeleteFileA
SetEndOfFile
GetModuleHandleA
CreateMutexW
CloseHandle
GetTickCount

shell32

ShellAboutA
DragAcceptFiles
ShellMessageBoxA
DllUnregisterServer
DragFinish
SHFree
DragQueryFileA
SHGetSettings
StrChrA
ExtractIconA
SHGetMalloc
SHGetDiskFreeSpaceA
DuplicateIcon

dswave

DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE