34bbceaf5deead7c7531f2c99804c293_JaffaCakes118 | Triage

Sharing

General

Target

34bbceaf5deead7c7531f2c99804c293_JaffaCakes118
Size

148KB
MD5

34bbceaf5deead7c7531f2c99804c293
SHA1

4ccea4fb611f8ed5129a8d0928bae7fd84f6d850
SHA256

32b27ade8d1fe8a9a582f27daa13dc819038c39bb9803c2727b9ebcda149d165
SHA512

fe2b86d0a25dcdc36a7147a01afbb19eafff965d3e5c84f2dd9fd24eccf09e14d8df3e07b143942c74e8b07e8fcf2cb51c6e1fa815724af6851f9f1e595ce50b
SSDEEP

768:sUbcOssHBKiUFf+bHnMwZdxjh+tBdxKKVu1fdYOUDHwBjPRLkSUX6vaR3:LYsHBKLNuXxdQuB1ft0oLk84

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34bbceaf5deead7c7531f2c99804c293_JaffaCakes118

Files

34bbceaf5deead7c7531f2c99804c293_JaffaCakes118
.exe windows:5 windows x86 arch:x86

428abf3a4e7372729a6340e83828f6a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
DeleteFileA
FlushFileBuffers
OpenFileMappingA
ReadFile
OpenFile

user32

DrawTextA
GetScrollInfo
AppendMenuA
CreateIcon
GetMenu
DialogBoxParamA
DrawTextA
GetWindowTextLengthA
IsWindow
BeginPaint
GetMenu
GetMenu
AlignRects
BeginPaint
GetScrollPos
IsWindow

advapi32

RegLoadKeyA
RegQueryInfoKeyA
RegOpenKeyW

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 105KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ