b3311fc8c7a6a24ccf24c6f92441dfb2_JaffaCakes118 | Triage

Sharing

General

Target

b3311fc8c7a6a24ccf24c6f92441dfb2_JaffaCakes118
Size

815KB
MD5

b3311fc8c7a6a24ccf24c6f92441dfb2
SHA1

27c1159f3acefa9b1abe67797c8e404a841c60e3
SHA256

e2786bacd171f0e0a52eb84dcf65e191efb8b479ca5fefff75d864dfecd96870
SHA512

a8a38d7c7f80a09f95334b768074464511eb3a59536befeaef5f3f660a61697bb91b156d9a8ebedf5c96ffe72738cb7a4698df503f4030c1841fa5cb0f1f28d8
SSDEEP

12288:pdR7exMvnDs3NSIyVMOv+OaYJz7APrUEFqeyc4USR7IwEdrhzDN/etgO6kNTDlI:FwMvtIyVRvrz7ATJqeR4CH1E6k/I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3311fc8c7a6a24ccf24c6f92441dfb2_JaffaCakes118

Files

b3311fc8c7a6a24ccf24c6f92441dfb2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c90200a81fbfe139496e784937a6a7ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CreateMutexA
Sleep
GlobalUnlock
SetupComm
lstrlenA
CreateFileA
GetACP
CloseHandle
FindAtomA
HeapDestroy
ExitProcess
TlsGetValue
MapViewOfFile
HeapCreate
FindClose
LoadLibraryExW
GetLastError
LocalFree
FreeEnvironmentStringsA

user32

DrawMenuBar
DispatchMessageA
CheckRadioButton
GetFocus
CopyRect
FillRect
DrawEdge
GetDlgItem
DefWindowProcW
CallWindowProcA
IsWindow
GetIconInfo
GetDC
MessageBoxA

uxtheme

GetThemeSysInt
GetThemeRect
DrawThemeEdge
DrawThemeText
DrawThemeIcon

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ