e9e677847c3e3b5584f24e4b6cbc4754_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9e677847c3e3b5584f24e4b6cbc4754_JaffaCakes118
Size

55KB
MD5

e9e677847c3e3b5584f24e4b6cbc4754
SHA1

58b023aed5b8b2f6114eb90a096b5b3279e74f29
SHA256

921b2bccf8aacf562e1e76e5461c176b07a066668aacc1e79b33a8ddd967f71d
SHA512

b0197780b3bb28f18045e192c6e95cb616bddbc0affcbc08219a0f9257c9748657d8218244e073c4e0ae006b6f69769084586f058e884723081415c82a3011eb
SSDEEP

1536:nmzFkYT/sYTuNE9lSkuoG7nItCyhiXC5bbSl4ZfTdD3s:nmzFTjsYTuN6skuoG7nItCFCVz1Zc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9e677847c3e3b5584f24e4b6cbc4754_JaffaCakes118

Files

e9e677847c3e3b5584f24e4b6cbc4754_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8687f308ca806fcc4ce3131fb9d2576c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
CreateMutexA
LoadLibraryExW
GetACP
LocalUnlock
TlsGetValue
Sleep
ReleaseMutex
UnmapViewOfFile
FreeEnvironmentStringsA
CreateFileA
SetLastError
SetConsoleCursorInfo
FindClose
GetLastError
HeapDestroy
ExitThread
GlobalFree
HeapCreate
GetModuleHandleA

user32

FillRect
DrawEdge
GetFocus
CheckRadioButton
GetDC
DefWindowProcW
GetDlgItem
CallWindowProcA
GetIconInfo
DispatchMessageA
CopyRect
IsWindow
DrawMenuBar

uxtheme

GetThemeRect
DrawThemeText
DrawThemeIcon
DrawThemeEdge
GetThemeSysInt

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ