39f598c40fe5b018d649c8ad6ad748ee_JaffaCakes118 | Triage

Sharing

General

Target

39f598c40fe5b018d649c8ad6ad748ee_JaffaCakes118
Size

752KB
MD5

39f598c40fe5b018d649c8ad6ad748ee
SHA1

8fc9576d07325018996c4cd0dc3b026f29d1215a
SHA256

e7a482d08a2edb1a00401d4f8ea4ef72d2e3976646b70998e74f4728f99c946a
SHA512

92711780488d5a6b06acaed51c375353c20b737120dde8ff53ca939a945589aa243ab980e4595f7ef4432ff415d3468e5162d43e21fdadee6b30076e63da8b05
SSDEEP

12288:1rD4ktMlX9l3NbZncDEsaIl/gOjXqW+5OsANCTyzdkQgG9EDgk9yTFRCDQLMO:lDHulXR1cDptTqWMOsANxz2a9EzITHCb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39f598c40fe5b018d649c8ad6ad748ee_JaffaCakes118

Files

39f598c40fe5b018d649c8ad6ad748ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63909a1a1d95d1fad6ca992051563227

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
CloseHandle
lstrlenW
FindResourceExA
SetEvent
HeapDestroy
GetVersion
GetModuleHandleA
GetCommandLineW
WriteConsoleA
DeleteFileA
CreateSemaphoreW
ExitProcess
GetEnvironmentVariableW
OpenEventA
SuspendThread
ReleaseMutex
FindClose
HeapCreate
CloseHandle

user32

GetSysColor
FindWindowA
PeekMessageA
GetWindowLongA
DispatchMessageA
CallWindowProcW
SetFocus
IsZoomed
DrawTextW
CreateIcon
GetKeyState
GetClassInfoA
DispatchMessageA

docprop

DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 744KB - Virtual size: 744KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ