34c6c1a2c5de49a5838568f0cc121c8c_JaffaCakes118 | Triage

Sharing

General

Target

34c6c1a2c5de49a5838568f0cc121c8c_JaffaCakes118
Size

393KB
MD5

34c6c1a2c5de49a5838568f0cc121c8c
SHA1

ccb36338e2e4c90239a145fd2ca460707379c92d
SHA256

c170c1a6878cea1ba581a7bd698a9d50df8eb5578cca3f1e8dd87635158340a5
SHA512

f022c6fd0faa9485e22f1c0fe3b8844918392e6bac18d6632d45c27af037e859f82bffe9d1ec991bc4be5e4db22eaa62b78e3b77b1445e20ae6f53fc44c1bc69
SSDEEP

6144:KHvwo5nhxlGFWPgynsiNYBoGFFYhaRRXcuCiX++Vzrmkqmu5jbmdVnnQqiFPf:KYQnhxUUSbuGFehOsuC8XmklbnO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34c6c1a2c5de49a5838568f0cc121c8c_JaffaCakes118

Files

34c6c1a2c5de49a5838568f0cc121c8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72faeca0a1a8d634685db4d3fdb346be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExW
TlsGetValue
CloseHandle
HeapCreate
FindAtomA
CreateFileA
GetConsoleCP
GlobalUnlock
GetLastError
CreateFileMappingA
SignalObjectAndWait
Sleep
LocalLock
FreeEnvironmentStringsA
FindClose
GetModuleHandleA
ExitProcess
CreateMutexA
LocalFree
GetACP

user32

DispatchMessageA
GetDlgItem
CheckRadioButton
GetDC
FillRect
IsWindow
GetFocus
DrawEdge
CopyRect
DrawFrame
GetIconInfo
CallWindowProcA
DefWindowProcW
MessageBoxA

clbcatq

SetupOpen
InprocServer32FromString
SetSetupSave
GetComputerObject
GetCatalogObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ