3cc9f236e642ec1ab6ba6052e8d687e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cc9f236e642ec1ab6ba6052e8d687e0_JaffaCakes118
Size

29KB
MD5

3cc9f236e642ec1ab6ba6052e8d687e0
SHA1

34e66d6bf56bff6d51fe6d4690760a4fbc123e0f
SHA256

e0d21d02786b1e1010837343b48db21ab9782310cf8d6451400bf65702475835
SHA512

1ac5fa4791e0539a1163ada26d5bf7d0f78089cf1f0c3d3482936bdc04fdb5f9df39600506b53b80d98c2da4e2a66e5019e4141ec855c6032b90dc7482eb7060
SSDEEP

384:mSrbtjKyPHH7DsIYCiz7AxrfujZqiachLfipxBQehyb8RHVVLtiTpF//Klc2gy2a:LnQIYCiqmg0uxBoQsTphyldgyu5nCAa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cc9f236e642ec1ab6ba6052e8d687e0_JaffaCakes118

Files

3cc9f236e642ec1ab6ba6052e8d687e0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

73ac517e9de1e34e94fe1e9d7462886b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassW
GetKeyboardState
DdeFreeStringHandle
InSendMessage
SetProcessWindowStation
CreateMDIWindowA
DispatchMessageA
WaitForInputIdle
RegisterServicesProcess

ole32

HMETAFILE_UserFree
CoSuspendClassObjects
DllDebugObjectRPCHook
OleSetAutoConvert
CLSIDFromString
CLSIDFromString
IsValidPtrIn
OleDestroyMenuDescriptor

kernel32

VirtualProtect
GetStartupInfoA
IsBadReadPtr
ExitProcess

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 981B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE