3e7a4a9dec429b5f096093829ce47a07_JaffaCakes118 | Triage

Sharing

General

Target

3e7a4a9dec429b5f096093829ce47a07_JaffaCakes118
Size

393KB
MD5

3e7a4a9dec429b5f096093829ce47a07
SHA1

880fb8af60d58ab737dc9acaaab211573331659d
SHA256

08cee484a9f98c4278b3b19f5b11186c8aa515a3d7ae44ed32d6e7cda5aff52d
SHA512

af5b07a1d6b6e5f034af5415e1f9af688de8a5a2859ebaf09990112b2bfeb6ed4bf05be5fb203bfc8e83b4ddaf6e962f3caae958c36f08d04c736436fe8b79c4
SSDEEP

6144:Qasp7Blo5nhxlGFWPgynsiNYBoGFFYhaRRXcuCiX++Vzrmkqmu5jbmdVnoKfYAo:QjBlQnhxUUSbuGFehOsuC8XmklboKf5o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e7a4a9dec429b5f096093829ce47a07_JaffaCakes118

Files

3e7a4a9dec429b5f096093829ce47a07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8863dc437e5ae87ae3f16476ca4e8b57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
FreeEnvironmentStringsA
LocalLock
SignalObjectAndWait
LoadLibraryExW
CreateFileMappingA
CloseHandle
Sleep
FindClose
GlobalUnlock
HeapCreate
LocalFree
GetLastError
GetACP
FindAtomA
GetConsoleCP
TlsGetValue
CreateFileA
CreateMutexA

user32

GetIconInfo
CopyRect
DefWindowProcW
DrawEdge
GetDlgItem
GetFocus
CallWindowProcA
FillRect
DispatchMessageA
GetDC
DrawFrame
IsWindow
CheckRadioButton
MessageBoxA

clbcatq

InprocServer32FromString
GetComputerObject
SetSetupSave
GetCatalogObject
SetupOpen

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ