3b2b2c3b436d36568b21a9491f99a522_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b2b2c3b436d36568b21a9491f99a522_JaffaCakes118
Size

303KB
MD5

3b2b2c3b436d36568b21a9491f99a522
SHA1

76d582f8792f62ffdcd10191b753a1adbdff731d
SHA256

3b12ab814a6648e17048a90c99eadf513627202ce76a0f3ca9f0a4c7d1d68d53
SHA512

93b6f0d1c009f69305b916a2ef702ccd61ad919603cddf1187efb54dd649ed930c3edc8ac7ce6580e7cae9ef92dfe6663da79c19fb3b32bb68134a7597087a91
SSDEEP

6144:3n81sd2twwIq1j/B1ndLqE619hDdCfT1/njH0YNRm0u3z:s1sd2yQNB1dLB61jBsB7/m0u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b2b2c3b436d36568b21a9491f99a522_JaffaCakes118

Files

3b2b2c3b436d36568b21a9491f99a522_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce7086e22da8b53955c704a07d00b545

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LoadLibraryW
LocalFree
CloseHandle
PulseEvent
GetCommandLineW
HeapCreate
Sleep
UnmapViewOfFile
GetComputerNameA
GetCurrentDirectoryA
SetLastError
GetTickCount
LocalUnlock
CreateFileA
SetEvent
GetSystemTime
lstrlenA
GetModuleHandleA
CreateThread

user32

GetScrollBarInfo
CheckRadioButton
GetDlgItem
DispatchMessageA
DrawEdge
CallWindowProcA
GetDC
FillRect
DrawMenuBar
SetFocus
GetKeyState
CreateWindowExA
IsWindow

clbcatq

SetSetupOpen
UpdateFromAppChange
SetupOpen
DowngradeAPL
CheckMemoryGates

desk.cpl

InstallScreenSaver

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ