38c9a3dee4a10de587455375eeeea600_JaffaCakes118 | Triage

Sharing

General

Target

38c9a3dee4a10de587455375eeeea600_JaffaCakes118
Size

65KB
MD5

38c9a3dee4a10de587455375eeeea600
SHA1

93e007c57d1b3e2a92d46966cc824e26737301cb
SHA256

d0fb5c8452bb9635ed50793fac0074fa021047478fc4a124b88e15fb22918a87
SHA512

410df470fc6428a967deb78bde7360b167c261c2726904b672c66034adaa50479d76f0a97c4af4356db87f75dabd96e3c9dac7465246f6588ae26f7c05dd7d90
SSDEEP

1536:n3p5GLMNmCBq7hFY7GsGeHCbFzadpwWHz25dNGzlBHaB:3GoAQ76HbFzadpLz27AB6B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38c9a3dee4a10de587455375eeeea600_JaffaCakes118

Files

38c9a3dee4a10de587455375eeeea600_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9f64efe8743828c40abbf9a3de7b74b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA
DeleteMenu
DestroyIcon
GetWindowTextLengthA
GetMenu
DestroyCursor
LoadIconA

comctl32

ImageList_Destroy
ImageList_GetBkColor
ImageList_Draw
ImageList_Create
ImageList_DragShowNolock

kernel32

GetThreadLocale
GlobalAlloc
VirtualAlloc
GlobalDeleteAtom
GlobalFindAtomA
LoadLibraryA
GetCurrentThreadId
VirtualAllocEx
ExitProcess
GlobalAddAtomA

gdi32

GetClipBox

Exports

Exports

_7Kbgnblg@12
_mRzLJohi@4
_SeVzHEnTs_x@20
wG7QLbFu
TjBrr0uI9Q
_480oJJ0voka9
wrZQY4AQVe8Ioc
PHS53v@20
gABr9GuhP
Ioy6sZICFfUFPz@24
u4lH_4rfm
vgtba@24
pnKCN05@24
qGy2N@8
JSHBcZnUw
_RUALTcEapuhp
EMKbGvpvExo
_wbymUdbo@12
_WZiH8rBSpYkY5@12
_W7GX40HPmW4qr
_8jABBuLUQku1S
_ImwOPN9OBZ
jGypUwbj_n
_6jbuVEyeBLikB@24
_dQa6FBzV
EV6tkYf9bBq@16
_o0kFLOgVksY@12
_22siv0t7cuB3J

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ