3e2d94026fd0653cdba570a785b9cd97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e2d94026fd0653cdba570a785b9cd97_JaffaCakes118
Size

261KB
MD5

3e2d94026fd0653cdba570a785b9cd97
SHA1

2ea8bdd66ad9e568999229d88519c17ae2687862
SHA256

01a95e704b7a42be120652275d1a762a918b042ea8769f94a9436cc25ed1b800
SHA512

6bff8be6a7d327f93eb4cf703fe26e0d7911dbf6f361bb301e475611f9afb0ccd28ebb2bff9f643413e56565e29599836e8d207a7de24009d2b1f64b6c6d5470
SSDEEP

3072:jMtnDPF4jLJG0RxbAivbl0H1WrfxVLo0YnFFN5Cj46fsw0bUQCbe73yN/TAHXGRi:MnDsVd1zlK4x6XUHfivg/wi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e2d94026fd0653cdba570a785b9cd97_JaffaCakes118

Files

3e2d94026fd0653cdba570a785b9cd97_JaffaCakes118
.exe windows:5 windows x86 arch:x86

37bb3ce4c0e58bd7e11c3343cea08491

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CloseHandle
WriteFile
GetTickCount
CreateFileA
FindAtomA
lstrcatA
lstrcpynA
lstrlenA
GetModuleFileNameA
GetProcAddress
GetVersion
GetModuleHandleA
GetLocalTime
GetTempPathA
GetSystemTime
WaitForSingleObject
CreateProcessA
lstrcpyA
GetTempFileNameA
lstrcmpA
ExitProcess
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

InflateRect
wsprintfA
GetCursorPos
GetCaretPos
GetFocus
EqualRect
GetWindowRect
IsWindowVisible
ClientToScreen

shlwapi

SHGetValueA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 247KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE