f16e1877fae599c9933198c5903d6624_JaffaCakes118 | Triage

Sharing

General

Target

f16e1877fae599c9933198c5903d6624_JaffaCakes118
Size

789KB
MD5

f16e1877fae599c9933198c5903d6624
SHA1

377b453fff9c9cb69479dd31291c13909955e78b
SHA256

155270905dfd7691309e46be293c1483419995649d8a0aeb7ad1126f2e8618f4
SHA512

265496529bb6c7c01522d0f4a7a9c767438399e036dada83340f2be6fc4f3c7a5af7dad911c8a28cc43815a710557d6fdb6d52ff8c41848b222f772b5f6b1c24
SSDEEP

12288:bF3Z7IkokOVRu743EndVHw94EZSmTWdngM5hgeq9w8xbuDvcnQ4GZmieSP9Ymm:l1IfnI7DKBZSmKeM5ZKCDEnRk1Qmm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f16e1877fae599c9933198c5903d6624_JaffaCakes118

Files

f16e1877fae599c9933198c5903d6624_JaffaCakes118
.exe windows:4 windows x86 arch:x86

220174df722375adc12daa19eaf45061

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
SetLastError
CreateFileA
GetStdHandle
TlsGetValue
FindResourceA
Sleep
GlobalUnlock
CreateMutexA
GetPriorityClass
HeapCreate
GetModuleHandleA
GetCurrentThreadId
LoadLibraryExW
LocalFree
ReleaseMutex
TerminateThread
SetEnvironmentVariableA
CloseHandle
GetConsoleMode

user32

GetDC
DrawEdge
CopyRect
GetIconInfo
CallWindowProcA
DispatchMessageA
CheckRadioButton
DrawMenuBar
GetDlgItem
IsWindow
GetCaretPos
FillRect
SetFocus

apphelp

SdbFindNextTag
ApphelpCheckIME
SdbFindFirstTag
SdbGetDatabaseID
SdbCloseDatabase

clbcatq

ComPlusMigrate

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 765KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ