3f6196c370e5059739da688260357b4c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f6196c370e5059739da688260357b4c_JaffaCakes118
Size

392KB
MD5

3f6196c370e5059739da688260357b4c
SHA1

81da63dbff0b4ab5d5bd64dcb864c4a446e858bc
SHA256

2f6ab8529514f53c50e3b1057d8099e7f8d509d067a0443f83e536f6d4d67a4f
SHA512

7e1c7f26335242ecba5966580a9ee164262ef26f1af10f91c4907ac58b819a24f6a3fa2cb7eafa6bfbeaab1176534de562d2daa394bd4b43b7ae96c2bee6cc63
SSDEEP

6144:7qN2mGp9VUwTZtX02giP9YoRRQGb8gJCPankzjzVjyTVyS9m1D4jheFue:njmwTZSihRQwJCi4zVWThBVege

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f6196c370e5059739da688260357b4c_JaffaCakes118

Files

3f6196c370e5059739da688260357b4c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2170ce16c0f371b29f1389435426ec3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExW
SetConsoleCursorInfo
TlsGetValue
Sleep
GlobalFree
FindClose
LocalUnlock
HeapDestroy
CreateFileA
GetModuleHandleA
CreateMutexA
HeapCreate
GetACP
UnmapViewOfFile
SetLastError
ReleaseMutex
GetLastError
FindResourceA
ExitThread
FreeEnvironmentStringsA

user32

CallWindowProcA
GetIconInfo
DrawEdge
CheckRadioButton
GetFocus
DefWindowProcW
CopyRect
FillRect
GetDlgItem
IsWindow
GetDC
DispatchMessageA
DrawMenuBar

uxtheme

GetThemeRect
GetThemeSysInt
DrawThemeIcon
DrawThemeText
DrawThemeEdge

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ