38c110e79f8a4927f2f27f2ef0af29d8_JaffaCakes118 | Triage

Sharing

General

Target

38c110e79f8a4927f2f27f2ef0af29d8_JaffaCakes118
Size

815KB
MD5

38c110e79f8a4927f2f27f2ef0af29d8
SHA1

653f84f538eed0a050a8b389f7d27d9fb5599a36
SHA256

73f182dac264dbd4f58be08d0d2dc6c4afc3b4c937367bd7844d78b1d3e08f11
SHA512

144cdbe829239fd0555c7682b65dab075ddadf7d4c97ed2561be88c179df43bbc4ac8f9ab4f0428f32a8dd234004d021ffb4703cd98525191d7888d7e2f9347e
SSDEEP

12288:DmEPOxXezjdoLFynOc96E9h27parKqfrfDgPKCOB8zC2b4jZGrqFOQTXJ+tl8HqF:SU+X8j6F5p7parV/dGv4jZGrUvqx8E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38c110e79f8a4927f2f27f2ef0af29d8_JaffaCakes118

Files

38c110e79f8a4927f2f27f2ef0af29d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d597719c8b5c8c3016de0673118b9628

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
lstrlenA
GlobalUnlock
FreeEnvironmentStringsA
CreateFileA
FindAtomA
SetLastError
SetupComm
GetLastError
GetACP
FindClose
GetModuleHandleA
CreateMutexA
HeapCreate
ExitProcess
LoadLibraryExW
HeapDestroy
MapViewOfFile
LocalFree
UnmapViewOfFile

user32

CheckRadioButton
DrawMenuBar
DrawEdge
IsWindow
GetIconInfo
FillRect
DispatchMessageA
GetDlgItem
CopyRect
GetFocus
GetDC
CallWindowProcA
DefWindowProcW
MessageBoxA

uxtheme

DrawThemeEdge
DrawThemeText
DrawThemeIcon
GetThemeSysInt
GetThemeRect

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ