3fc6bd67d007ef41572f6b6c6d0dd800_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fc6bd67d007ef41572f6b6c6d0dd800_JaffaCakes118
Size

168KB
MD5

3fc6bd67d007ef41572f6b6c6d0dd800
SHA1

a8b5249bc489dfbd123e28b94166631092137f18
SHA256

01bc31f1d5f625aac740df7c84b611c2a7c594ca0934f095ebda07b586fe8aa8
SHA512

d4325ec722a518896dc3b5788c57d02a7faf82c0162881e23e38727874bdd5dcf9bc672213c7787e1cd566a7759e9596c919c780582f434db1d5cb01270c582d
SSDEEP

3072:hcCtcOlBifhDeLfeVoieZ537iD8Y6FQBHxcL1bXM5mQxJXfXSWTKgIkJUk:FZF2kFsRcNXqfpKgDJU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fc6bd67d007ef41572f6b6c6d0dd800_JaffaCakes118

Files

3fc6bd67d007ef41572f6b6c6d0dd800_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8305eb85dedbd3a35cc46671f653c75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CloseHandle
GetSystemTime
GetFileAttributesA
CreateFileW
GetModuleHandleA
VirtualAlloc
GetProcAddress
VirtualFree
AddAtomA
QueueUserAPC
GetCurrentThread
ExitThread
CreateEventA

user32

DestroyWindow
PostMessageA
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjectsEx
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ