3435d01d541c6773c378db508440aa8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3435d01d541c6773c378db508440aa8c_JaffaCakes118
Size

175KB
MD5

3435d01d541c6773c378db508440aa8c
SHA1

f673d4aefc66c80ad59cc5d352b237e118e4f6c5
SHA256

a2307d1be06455cc15f427d49152d3f7724d1e3c966b44510c79d00ad56d0601
SHA512

4d195c9401c99d9b8427ad2946c136ed4c8f249594e886f2a8f1a49609967ee5a1b6705f6f4919537fbf30b02bfd351e0e9554b78807878f82f1522b9744e68e
SSDEEP

3072:GPEkmKcNjIYdwM3NQ62PIMLQxMUPkvEypYMh0y3Sn3bvNfIterr5GYH:G8MUsYdwM3NgDLgKYMCyijNg8HH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3435d01d541c6773c378db508440aa8c_JaffaCakes118

Files

3435d01d541c6773c378db508440aa8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

efcf8c179b634be486e0956724259f86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_initterm
_wcsnicmp
asin
wcscspn
wcschr
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
??2@YAPAXI@Z

kernel32

GetUserDefaultLCID
TlsFree
TlsAlloc
VerLanguageNameW
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleA
lstrlenW
WideCharToMultiByte
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
GetCurrentProcessId
LoadLibraryExA
CompareStringW

ddraw

DirectDrawCreateEx
DirectDrawCreate

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ