3efe334d63c3c4223e38cfa97afd7e27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3efe334d63c3c4223e38cfa97afd7e27_JaffaCakes118
Size

814KB
MD5

3efe334d63c3c4223e38cfa97afd7e27
SHA1

6124ddd6c808d5be157557a16d58d20d48213869
SHA256

a685a05d79e6da0c1aec01086a3bf6bbfc8cab6f18bd5b46d83f1b0721708a9f
SHA512

36fab7e4df17efd874825b8f0fa0b2c62b88a6813dfd319fa26043750ec85d3df24659a46f149224821f5b58d10aca76b8b20767f0a82c8215e80611c6fb7132
SSDEEP

12288:8hxZUc4bXNKfEcUn0f+FLmlHVhExQi3P59N0l/LNMNwEf6cxqFPppoPb50ult:qZUb7U/e0mFCVVu/59N0BpEicxSGF7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3efe334d63c3c4223e38cfa97afd7e27_JaffaCakes118

Files

3efe334d63c3c4223e38cfa97afd7e27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab6853344c435f7981d5dff09016083f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
FreeEnvironmentStringsA
LoadLibraryExW
CreateFileA
SetLastError
GetModuleHandleA
GlobalFree
CreateMutexA
FindClose
TlsGetValue
GetACP
Sleep
GetLastError
SetConsoleCursorInfo
LocalUnlock
HeapDestroy
HeapCreate
ExitProcess
FindResourceA
UnmapViewOfFile

user32

DrawMenuBar
CheckRadioButton
CopyRect
GetFocus
DrawEdge
GetDlgItem
GetIconInfo
DefWindowProcW
FillRect
GetDC
IsWindow
DispatchMessageA
CallWindowProcA

uxtheme

GetThemeRect
GetThemeSysInt
DrawThemeText
DrawThemeIcon
DrawThemeEdge

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ