03d61b0cd7649b2d2528b8d1e659fd4e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03d61b0cd7649b2d2528b8d1e659fd4e_JaffaCakes118
Size

393KB
MD5

03d61b0cd7649b2d2528b8d1e659fd4e
SHA1

c0c778e9b54218ec7fed6ec0d818507fb732c1f4
SHA256

3f91135842f1c0fa37683608e4e9c6c8a79708dda9da0aefad57bf076fa55524
SHA512

23a9208668a03ef562aa8be47ab6925d6758f587ca4081f460f9efe1abe9550497e355319dc6b646a457c11d8c6c2ea8a782ca314fe05f6fed9d4b0e02ac945e
SSDEEP

6144:WNUYNeo5nhxlGFWPgynsiNYBoGFFYhaRRXcuCiX++Vzrmkqmu5jbmdVnZ9qxG:WdeQnhxUUSbuGFehOsuC8XmklbLqxG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03d61b0cd7649b2d2528b8d1e659fd4e_JaffaCakes118

Files

03d61b0cd7649b2d2528b8d1e659fd4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d54d8070290ebc696959f19962090ac6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateFileA
GetConsoleCP
GetACP
FreeEnvironmentStringsA
CreateMutexA
TlsGetValue
LocalLock
ExitProcess
GlobalUnlock
HeapCreate
LocalFree
FindAtomA
FindClose
CloseHandle
CreateFileMappingA
SignalObjectAndWait
GetModuleHandleA
Sleep
LoadLibraryExW

user32

GetFocus
DrawEdge
GetIconInfo
DefWindowProcW
DispatchMessageA
IsWindow
GetDlgItem
CopyRect
FillRect
GetDC
DrawFrame
CallWindowProcA
CheckRadioButton
MessageBoxA

clbcatq

InprocServer32FromString
SetupOpen
GetComputerObject
GetCatalogObject
SetSetupSave

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ