3fc8ccc4bb4391816521be6d80e112b1_JaffaCakes118 | Triage

Sharing

General

Target

3fc8ccc4bb4391816521be6d80e112b1_JaffaCakes118
Size

154KB
MD5

3fc8ccc4bb4391816521be6d80e112b1
SHA1

73d724b24637bb2b47a7527607ec775e4d674b10
SHA256

a2544734d7ead6b1b6f527a27144a0552c5dfffd636b2be4f34fe5db6b14bb53
SHA512

f33b97dfd13aef39c5f6398bb0bec36a8adae8c42ef2ae1248873901f17ecf6fbb5a45163c080734f3a1d77173d9a1cf38a2a79570c9800f61d1f1c7443bc36e
SSDEEP

3072:SWYU6276UjvS7RYqJ/Y2kaLo8UnMxjPHB32zCHT4hrPaC:S7UdWUOlYqO2kaLoLnW9kITsrPaC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fc8ccc4bb4391816521be6d80e112b1_JaffaCakes118

Files

3fc8ccc4bb4391816521be6d80e112b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c1d0fb955a9a4c70149aa940e342021

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
LocalFree
lstrcpynW
FormatMessageW
GetModuleHandleW
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenW
lstrcpyW
GlobalFree
SetLastError
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedDecrement
CloseHandle
lstrcmpW
ReadFile
SetFilePointer
ExitProcess
RtlUnwind
GetCommandLineA

shell32

ShellExecuteExW

shlwapi

SHDeleteKeyW
PathCombineW

ole32

CoRevokeClassObject
CoQueryProxyBlanket
CoReleaseMarshalData
OleIsCurrentClipboard
OleInitialize
CoFreeUnusedLibraries
OleUninitialize

Sections

.text
Size: 58KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ