3e03550f33e29327638ca45d0bced0ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e03550f33e29327638ca45d0bced0ff_JaffaCakes118
Size

29KB
MD5

3e03550f33e29327638ca45d0bced0ff
SHA1

e7ec4592a505ce20f69c056afa0df0c3a1b429e0
SHA256

170bf1e541e2b16d093ed19bee4059e4864da4300e5037f6f37cab61313fa84f
SHA512

6fc0e4ad5cf4abb30774e0037d841dcc13b55c4c19940380143fe917aca0bf64f7d1b1d912c2c61cfab862eb8623f2d9bfb8645e653a3d1c3c449d338ffea08a
SSDEEP

384:lrN0X3olHDripf+d7kQV6seelvMhUbqFfEfSO69L3VrAinfezeG/W6NJrT/wbH:lrWX4p/BkQDkhUbqFMfSXA9KP6NxrUH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e03550f33e29327638ca45d0bced0ff_JaffaCakes118

Files

3e03550f33e29327638ca45d0bced0ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b114225793951361d0c627762efe2bd0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
GetModuleFileNameA
CopyFileA
Sleep
DeleteFileA
GetSystemDirectoryA
SetCurrentDirectoryA
GetWindowsDirectoryA
LoadLibraryA
GetCurrentProcess
GetDriveTypeA
GetLogicalDriveStringsA
FindClose
FindNextFileA
FindFirstFileA
Module32Next
Module32First
CreateToolhelp32Snapshot
GetProcAddress
GetModuleHandleA
CloseHandle
GetFileAttributesA
SetFileAttributesA

user32

EnumWindows
PostMessageA
wsprintfA
GetWindowThreadProcessId

advapi32

RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey

msvcrt

sprintf
_strcmpi
strstr
strncpy
_stricmp
strrchr

Sections

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ