3fa78ee518745a35bf7af0818c611f48_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fa78ee518745a35bf7af0818c611f48_JaffaCakes118
Size

16KB
MD5

3fa78ee518745a35bf7af0818c611f48
SHA1

a05002dc36f7b754298144389f258c7706ce63b5
SHA256

aaa0ea788f4fe6f7d71d144489e9977135c4a2f25d2f9f5fb55c690fa18d654a
SHA512

f84b4110aeb81ce8ce922eabef9e09b6fe5f48ca05eaf636da178d5512ccbe8738acf209e3a1b8b8d85c6d7f21424b7a3a9c0b1d8ae7f52f9f60945a82fe0626
SSDEEP

192:6AGKRB2WfbHDxc10DktTjfRYOqHWM9uc4VVc:CKRBS0DkGHWM9B4VVc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fa78ee518745a35bf7af0818c611f48_JaffaCakes118

Files

3fa78ee518745a35bf7af0818c611f48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1112b60a3ae78eec13670ebff7b600d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
WaitForMultipleObjects
GlobalSize
GetUserDefaultLangID
VirtualProtect
HeapCreate
GetConsoleDisplayMode
WaitForSingleObject
CompareFileTime
GetConsoleCP
GetAtomNameA
InterlockedExchange
GlobalUnlock
lstrlenA
HeapReAlloc
GetVersion
GetCommandLineA
SetLastError
GetTickCount
LoadLibraryExA
ResumeThread

user32

ShowWindow
AnyPopup
GetParent
DrawTextA
GetClassNameA
GetDC
EndPaint
FrameRect
SetForegroundWindow
GetCursorPos
CreateIcon
wsprintfA
ReleaseDC
DragDetect
GetWindow
FillRect
BeginPaint
GetFocus
GetTitleBarInfo

rastapi

DeviceListen
DeviceDone
DeviceConnect
AddPorts
PortClose

quartz

DllGetClassObject

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ