3e1bb14832ff0f1bf4ece8cd07f311a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e1bb14832ff0f1bf4ece8cd07f311a2_JaffaCakes118
Size

130KB
MD5

3e1bb14832ff0f1bf4ece8cd07f311a2
SHA1

8c75f26d2b44ca19c9ea0ccb3de13b2a6390bbef
SHA256

86b98d724075137ad528cbe336525d4ca57936406ba7a9a866d6ea4174413366
SHA512

7c03b787499c492debb43cf7f7dbf74c4caaa425703a07f5d37ef07d7b3518f6ce8a03841fb2f6fc9727bd00637bc06adfe094c4c208a5274296f0084cca0ae5
SSDEEP

3072:yuV0sBAkHtyKqP2qUv2HLKr5sh285eCMIfIRx3Ar:PHtViGvByhteCVIfy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e1bb14832ff0f1bf4ece8cd07f311a2_JaffaCakes118

Files

3e1bb14832ff0f1bf4ece8cd07f311a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f4603d27f01c3268b6f27e093f3a6f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetLastError
WriteFile
GetThreadPriority
ReleaseSemaphore
GetStartupInfoA
GetDriveTypeW
FreeEnvironmentStringsA
InitializeCriticalSection
CreateThread
SetFilePointer
GetSystemTimeAsFileTime
EnumResourceNamesA
CreateSemaphoreA
SetEndOfFile
EnterCriticalSection
DeleteCriticalSection
ExitProcess
LeaveCriticalSection
WaitForMultipleObjects
CreateEventA
FindFirstFileW
CloseHandle
ReadFile
FindClose
Sleep
SetEvent
WaitForSingleObject
LoadLibraryA

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ