35ba9544f8f3434c6e4814a9cbcb58d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35ba9544f8f3434c6e4814a9cbcb58d6_JaffaCakes118
Size

815KB
MD5

35ba9544f8f3434c6e4814a9cbcb58d6
SHA1

3fbed2c69f8d119cd777cb9afda9ece19fdd48a4
SHA256

2ed45a480551e59979361d8d89f24f7d28f5e4f573a21d8c6514bf6afc05c487
SHA512

a0e0e2ba4b80cffb0e9fe352a8e5bd8335c5a4e4cc27594931e03296f90110c9af88515d980db2c96982faefb5e6138d0abe6a7ab8d552b05bf32aafaf77fbbb
SSDEEP

24576:TBg6AmhdUSZouyqGfZCnXy71xDaxiV+c07L6Nq/:aYCIgFx4XyJxUiVNw6NC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35ba9544f8f3434c6e4814a9cbcb58d6_JaffaCakes118

Files

35ba9544f8f3434c6e4814a9cbcb58d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

89967af8d8ee9a6d5d25a5fb4e88bda5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetModuleHandleA
CreateFileA
Sleep
HeapCreate
ExitProcess
CreateFileMappingA
GlobalLock
FindAtomA
CloseHandle
SetupComm
FindClose
CreateMutexA
FreeEnvironmentStringsA
GlobalUnlock
LoadLibraryExW
lstrlenA
GetACP
GetLastError
TlsGetValue

user32

CallWindowProcA
DrawEdge
CopyRect
CheckRadioButton
GetFocus
DrawMenuBar
IsWindow
GetDlgItem
DefWindowProcW
FillRect
DispatchMessageA
GetIconInfo
GetDC
MessageBoxA

uxtheme

DrawThemeEdge
GetThemeRect
DrawThemeIcon
GetThemeSysInt
DrawThemeText

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ