34a77c11dcda0c4e1499b23cb65010f5_JaffaCakes118 | Triage

Sharing

General

Target

34a77c11dcda0c4e1499b23cb65010f5_JaffaCakes118
Size

392KB
MD5

34a77c11dcda0c4e1499b23cb65010f5
SHA1

53cfb145cb5f44ed8e2b9a1eec798cfeeecebdbd
SHA256

d7c08606fd40d5dcbb2e6594bdaccec7bb2a0a0ae95259035e2e7c4ad4c77f4c
SHA512

3c433c5dd43b0e0dd4bb4a210206c4b798ebbfc61f94b01a971426f3a108fbb8ed8130339d00447f1aca8db12cede612e6b377265238aab8fe79bd588060a96d
SSDEEP

6144:w0hMUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3ddE3/:/vCJibvNYJbxYYgbRke6Dny/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34a77c11dcda0c4e1499b23cb65010f5_JaffaCakes118

Files

34a77c11dcda0c4e1499b23cb65010f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14b8ad8f7fce2ec9231433ac716f2e3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeMountPointA
FindClose
TlsGetValue
GetLastError
GetACP
FindResourceA
SetLastError
FreeConsole
UnmapViewOfFile
CreateMutexA
HeapDestroy
GetModuleHandleA
FreeEnvironmentStringsA
CreateFileA
LoadLibraryExA
HeapCreate
ExitProcess
GlobalFree
Sleep
LocalUnlock

user32

DrawMenuBar
CheckRadioButton
CallWindowProcA
DrawEdge
IsWindow
GetIconInfo
DefWindowProcW
GetFocus
CopyRect
DispatchMessageA
GetDlgItem
FillRect
GetDC

uxtheme

GetThemeSysInt
DrawThemeIcon
GetThemeRect
DrawThemeText
DrawThemeEdge

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ