3cc35b1ff18981eb92068e7450872a43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cc35b1ff18981eb92068e7450872a43_JaffaCakes118
Size

19KB
MD5

3cc35b1ff18981eb92068e7450872a43
SHA1

b1da930b46141a1ffd1b5930855375217d8ac12d
SHA256

6e17d64f81445403c0b69fd35fe4bce57e89606a6dfe53aa055f3dff2b6bd836
SHA512

cfbd8bdad2da75ac4369dd0f4199b900a982d3dc45be34dbe437d0f4a9d2e101ba91d1439d3e5f2b140cef856116de5f839098dbfa8ada83180a4f8c98591792
SSDEEP

384:SEnh0YpJaC/bG03zVgYseguN4IEvV7TInJ4oQJsM1ueH1:SEFpJhiGRPN4Im7cnSpJsk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cc35b1ff18981eb92068e7450872a43_JaffaCakes118

Files

3cc35b1ff18981eb92068e7450872a43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1f53ea5be5833d8c2707a4d2f0a3ab8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalAlloc
GetThreadLocale
GlobalUnlock
GetDriveTypeA
GetProcessId
GlobalLock
VirtualAlloc
VirtualAlloc

tapi32

lineSetCallData

user32

GetWindow
GetThreadDesktop
IsWindowEnabled

Exports

Exports

Ywjhecukbqy
Scsimoqme

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ