3ef21532f4a149bd17e01ea90a4518f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ef21532f4a149bd17e01ea90a4518f6_JaffaCakes118
Size

147KB
MD5

3ef21532f4a149bd17e01ea90a4518f6
SHA1

aa163852f225224bddb53100b4b8253f2b6f73ac
SHA256

f4448681eb3da7377e01e729d679aa8a668e2fbecae04ef877a7bac9861ac5c3
SHA512

222899222229910e45702a9e50fe10aa161494f910dec4f96bb6f420717c28b457795197e006dc77580f241489a8b5454ef8b4840414a2c464956ba27b16bd20
SSDEEP

3072:K6JhHOVqE8dRelURl+ES2UFl/8e2ZhOW17bI3mHMbQy:7JMqE2BlXK7/zuph4Cu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ef21532f4a149bd17e01ea90a4518f6_JaffaCakes118

Files

3ef21532f4a149bd17e01ea90a4518f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2cce3b4f0176e9b0a3d60adc50807ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
CreateMutexA
GetComputerNameA
SetEvent
GetCurrentThreadId
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
SetFilePointer
GetCurrentProcess
GetCurrentThread
ExitProcess
VirtualAlloc
GetCurrentDirectoryA
ReadFile
LocalAlloc
GetVersionExA
GetFileSize
VirtualProtect
CreateEventA

advapi32

GetUserNameA

user32

GetForegroundWindow

msvcrt

memset
wcslen
wcsncpy
memcpy

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ