3b21d201787f7734f79a706eb8f37629_JaffaCakes118 | Triage

Sharing

General

Target

3b21d201787f7734f79a706eb8f37629_JaffaCakes118
Size

139KB
MD5

3b21d201787f7734f79a706eb8f37629
SHA1

22746c97737bc3ca0ba60ee4ba2b8306dbd0990c
SHA256

da7d6aa0937d5aec91f757da2f1d346f8b20f0c79454faf744d33c279f09f351
SHA512

df858b393432898ac0e4fbabc446c383410a9b6a64f30fdf9d354a5006ee8669996b93bad97ff6e8f39ab80fa3f7999b4e4c9b8acce7cd28ceff4a8a5a74c0a5
SSDEEP

3072:37iDOEY93ULkBL0smdEIISA7DkzF2XwhwgHBddfCntoYY6r/dV:3+af3IsaPA7rgDd6toYZrlV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b21d201787f7734f79a706eb8f37629_JaffaCakes118

Files

3b21d201787f7734f79a706eb8f37629_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aeb9f6af6762d8312c15c06e49886131

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
CloseHandle
GetCurrentDirectoryA
GetConsoleAliasA
GetLocalTime
FindClose
FindNextFileA
FindFirstFileA
EnumResourceLanguagesA
WideCharToMultiByte
ReadFile
WriteFile
SetFilePointer
GlobalHandle
IsDBCSLeadByte
GetModuleHandleA
VirtualProtect
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcessHeap
GetModuleHandleW
CreateProcessA
GetTempFileNameA
HeapFree
HeapAlloc
LoadLibraryW
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess

oleaut32

DispGetIDsOfNames
DispGetIDsOfNames
SafeArraySetIID
CreateErrorInfo
SafeArrayAllocDescriptorEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

oledlg

OleUIBusyA

Sections

.text
Size: 129KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE