b3c3451045b45a936b9d1bf1aa7cdd48_JaffaCakes118 | Triage

Sharing

General

Target

b3c3451045b45a936b9d1bf1aa7cdd48_JaffaCakes118
Size

392KB
MD5

b3c3451045b45a936b9d1bf1aa7cdd48
SHA1

1d2a377afb765b39532c2422da357b9476ace661
SHA256

d5a637a1332c920773af3c09683b767a0270f9d8b2cdd95c2c33f831015ab8c5
SHA512

15a532fb52d7b7b0e27239699ce48ef1d06c613912b6ac77b62dfca76e5417d0e8c1af8c6e849006336251d022e782aad51ae39ea4003de16c7afcdae9bb618e
SSDEEP

6144:o0dMUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3ddE3/:zvCJibvNYJbxYYgbRke6Dny/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3c3451045b45a936b9d1bf1aa7cdd48_JaffaCakes118

Files

b3c3451045b45a936b9d1bf1aa7cdd48_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14b8ad8f7fce2ec9231433ac716f2e3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeMountPointA
FindClose
TlsGetValue
GetLastError
GetACP
FindResourceA
SetLastError
FreeConsole
UnmapViewOfFile
CreateMutexA
HeapDestroy
GetModuleHandleA
FreeEnvironmentStringsA
CreateFileA
LoadLibraryExA
HeapCreate
ExitProcess
GlobalFree
Sleep
LocalUnlock

user32

DrawMenuBar
CheckRadioButton
CallWindowProcA
DrawEdge
IsWindow
GetIconInfo
DefWindowProcW
GetFocus
CopyRect
DispatchMessageA
GetDlgItem
FillRect
GetDC

uxtheme

GetThemeSysInt
DrawThemeIcon
GetThemeRect
DrawThemeText
DrawThemeEdge

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ