3eaf306f8a1fb794bc39eb7f17d6b3a0_JaffaCakes118 | Triage

Sharing

General

Target

3eaf306f8a1fb794bc39eb7f17d6b3a0_JaffaCakes118
Size

170KB
MD5

3eaf306f8a1fb794bc39eb7f17d6b3a0
SHA1

d69a1f25eee85730072e7b8794557e2614c093ac
SHA256

ee736f700253c744a264235b3d8d152902e120dcba3b781c77b59060232222fd
SHA512

777ef6cc9ad8cda396e771438575bb08fccea8aeef2cb236afc31691e715a10783a5300f288d4f002595a76dfaba7e9f9dc2db9f3588c5ea6d061e0749b3b0c9
SSDEEP

3072:8EHOOLDtOStSyi8jr91E4McWRzDOiFvl97mJr:fOOXQi39orD3FvlC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eaf306f8a1fb794bc39eb7f17d6b3a0_JaffaCakes118

Files

3eaf306f8a1fb794bc39eb7f17d6b3a0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f45cc1247d8f12a061f330db3304ec43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyRect
LoadCursorA
CloseWindow
AppendMenuA
GetMenu
GetScrollPos
BeginPaint
IsMenu
GetDC
LoadCursorA
DrawTextA
DrawIcon
GetScrollPos

advapi32

RegQueryValueExW
RegLoadKeyW
RegEnumKeyW

kernel32

ExitProcess
ReadFile
OpenFileMappingA
ReadFile
CreateDirectoryA
GetFileTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 129KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ