3cd1ce3fbf45c4de40f16f489ee1f9a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cd1ce3fbf45c4de40f16f489ee1f9a7_JaffaCakes118
Size

451KB
MD5

3cd1ce3fbf45c4de40f16f489ee1f9a7
SHA1

3c67390dd3f7de0901bba54c4e40f4eb1e7c2a04
SHA256

150c35340fb6ecdc15bc3b790bccdc87df51532c91674437bf3be2ad72982238
SHA512

47508c9e9728df494f5773f791f87e56a04caed18aec28b3a37314db0df1872b810d6030b88fecb601c36540e8563a1e1c4c3dbda4b545ee905939b586277db7
SSDEEP

6144:R9Sl5CcAcbplZhFo7hOraRGJxiofyl9QBfr0ZsN62YzbyAijf1364Db3VW6ISkq9:ngBbpnHoWa0JxoQ5r0ZL22liLZiqzZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cd1ce3fbf45c4de40f16f489ee1f9a7_JaffaCakes118

Files

3cd1ce3fbf45c4de40f16f489ee1f9a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1406e853f2e115dc587596ec82ef1fda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableW
CloseHandle
SuspendThread
FindClose
HeapDestroy
DeleteFileA
FindResourceExA
WriteConsoleA
ReleaseMutex
GetFileAttributesA
GetCommandLineW
OpenThread
CloseHandle
SetEvent
GetTickCount
ExitProcess
HeapCreate
GetStartupInfoA
OpenEventW
GetModuleHandleA

user32

SetFocus
DispatchMessageA
IsZoomed
GetClassInfoA
DispatchMessageA
DrawTextW
FindWindowA
GetKeyState
GetWindowLongA
GetSysColor
CallWindowProcW
PeekMessageA
CreateIcon

docprop

DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 604KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ