3ded5fed9e0870d0f33935f9a4982b59_JaffaCakes118 | Triage

Sharing

General

Target

3ded5fed9e0870d0f33935f9a4982b59_JaffaCakes118
Size

814KB
MD5

3ded5fed9e0870d0f33935f9a4982b59
SHA1

53b9ffd6a3ab92eceb52edf96e3efebd7c487135
SHA256

acefe589d7d79d8ae4d62eedd81773affa2a3ff9dfffd90e89b583b5b5540684
SHA512

e837dd37c754da254d3173b96508d8b3ef2928141a78df4ef53dc8c7dd0579bdec9fdab5cc3bb35d778ac574d36e3c900fac74ac7b5d35127b61ab8a9e8eeeb0
SSDEEP

12288:GbaVqxwHDzxi8fj2JpSqUveX/cW1cUYofT3YOT+AFmp0N+xJ/VBoe5Jz:Gbzaxi+j27UmXkkcUZL7FmRXrz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ded5fed9e0870d0f33935f9a4982b59_JaffaCakes118

Files

3ded5fed9e0870d0f33935f9a4982b59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf34b180a84bfaefb363c927da80dcf2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
Sleep
FindClose
FreeEnvironmentStringsA
FindResourceA
LocalUnlock
LoadLibraryExW
HeapCreate
SetLastError
CreateMutexA
GetACP
GetModuleHandleA
HeapDestroy
GlobalFree
CreateFileA
ExitProcess
UnmapViewOfFile
SetConsoleCursorInfo
FreeConsole
GetLastError

user32

CheckRadioButton
CopyRect
DefWindowProcW
CallWindowProcA
GetDC
IsWindow
DispatchMessageA
DrawMenuBar
DrawEdge
GetDlgItem
FillRect
GetFocus
GetIconInfo

uxtheme

GetThemeSysInt
DrawThemeText
GetThemeRect
DrawThemeIcon
DrawThemeEdge

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ