0148ee1059480122e6125876d961041d_JaffaCakes118 | Triage

Sharing

General

Target

0148ee1059480122e6125876d961041d_JaffaCakes118
Size

392KB
MD5

0148ee1059480122e6125876d961041d
SHA1

0b10b8f634046a1dd2725634eeaea8ff95b52037
SHA256

f98a0fe619aa3798a05de855fad49dd2b96bc2e356fa1706377fde762560e921
SHA512

ebb364ed22255ea96a4d5580c3f2e3875940c29e3f147e1f156ee60e5262bad9a369b64c629ed7861a1ae85dd01eae5d9d82b60d44ae9a6b7dc7fcd88a5b7fa2
SSDEEP

6144:iQgbUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3dnBg:9PCJibvNYJbxYYgbRke6D/g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0148ee1059480122e6125876d961041d_JaffaCakes118

Files

0148ee1059480122e6125876d961041d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

758930eed839a385b1067b725baf8c14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
HeapCreate
GetModuleHandleA
GetACP
ExitProcess
FindClose
SetVolumeMountPointA
LocalUnlock
TlsGetValue
SetLastError
FreeEnvironmentStringsA
FindResourceA
HeapDestroy
FreeConsole
GlobalFree
LoadLibraryExA
GetLastError
Sleep
CreateMutexA
CreateFileA

user32

GetDlgItem
DispatchMessageA
CopyRect
DefWindowProcW
CallWindowProcA
CheckRadioButton
DrawEdge
GetFocus
GetIconInfo
IsWindow
DrawMenuBar
GetDC
FillRect

uxtheme

GetThemeSysInt
DrawThemeIcon
DrawThemeText
GetThemeRect
DrawThemeEdge

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ