3e90a3951d5d9917be3fe27f1c1eab9c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e90a3951d5d9917be3fe27f1c1eab9c_JaffaCakes118
Size

157KB
MD5

3e90a3951d5d9917be3fe27f1c1eab9c
SHA1

cea37b55c0127d872a1e1a0687b0ccc366054127
SHA256

d1f3d4cfd40aa6853bc95756e4ac9b7ef4df2fd09f9f6f65b50d324ff41bd105
SHA512

5d97feb9a2a75499b262b1a96c815aea2c80a9cfb5ad7d17da7d649e4128fffdcc75792108b506a47a0f01802bd5dca6fbcc2f16f90a3743d9af6f89357c2f2b
SSDEEP

1536:IrW2rWtLDUjKm79U7Qnv74/fR9CuT11kIBakvWZ3PvQT8:Ir0K79U7Qnv7AfBTDkp9Xr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e90a3951d5d9917be3fe27f1c1eab9c_JaffaCakes118

Files

3e90a3951d5d9917be3fe27f1c1eab9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3127087979ad94c507ae58d55e3d751

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetDesktopFolder
SHGetFileInfoA
Shell_NotifyIconA
Shell_NotifyIconW

oleaut32

OleLoadPicture
SysReAllocStringLen

user32

PeekMessageA
OpenIcon
OffsetRect
OpenClipboard
GetMenu
GetFocus
GetWindow
OemToCharA
CharNextA
PeekMessageW

kernel32

LoadLibraryA
ExitProcess
VirtualAllocEx
GetFullPathNameA
GetFileAttributesA
GetFileType
GetThreadLocale

Exports

Exports

_XmtMY@12

Sections

CODE
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tpdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eedata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ