3f98092727055323eac191db63ab5147_JaffaCakes118 | Triage

Sharing

General

Target

3f98092727055323eac191db63ab5147_JaffaCakes118
Size

27KB
MD5

3f98092727055323eac191db63ab5147
SHA1

b4c9ac4ac7efbefed8936394b745a23e2945d161
SHA256

1dc5dafa842642413edc894aae2cabc673763dfde133e4c3b06cd475afd984a4
SHA512

ecdc3b1259d2e3fb23d6ef27f4ab528fb999905016af9780eb411a48e76540ba0aa5f2bc7bb3b72b899f16f84106806f4490423f4f3445e98d4b1ae730dcbeda
SSDEEP

384:jkIdljEeNRjy7vFA8r6uwdsxLmNOCXkRZXhuqCJCCJ1:jkIfjE4Rjy7vFPOu4sqNVkrXh6JZJ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f98092727055323eac191db63ab5147_JaffaCakes118

Files

3f98092727055323eac191db63ab5147_JaffaCakes118
.exe windows:4 windows x86 arch:x86

268dc8de088e1ec15bb67ce09355bdf0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
lstrcpyW
lstrcmpW
GetLastError
GetTickCount
CloseHandle
GetModuleHandleA

msvcrt

wcschr
_adjust_fdiv
__CxxFrameHandler
wcstoul
memmove
_acmdln

user32

ScreenToClient
GetClientRect
CreateWindowExW
ShowWindow
LoadIconW
TranslateMessage

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ