0904c1db92aff4fdfbc4a7bfcfea61b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0904c1db92aff4fdfbc4a7bfcfea61b9_JaffaCakes118
Size

815KB
MD5

0904c1db92aff4fdfbc4a7bfcfea61b9
SHA1

539618de4fb561b90721c123bae28363e63dd330
SHA256

f7a57b8cb5de8783e7c9cf2bc391ea29366f4e2ff7553d32d534ead46c425337
SHA512

104c050fa4bef4356e61ec794d5851a8304875c50324b4c52ff5f3842d3e60e591cbf2b13c454b1f970ce8c353b65199aa16cf2b78bd5f2e092bbb929270d251
SSDEEP

24576:lqL9OL64URHXoD5MZJaZSgNVCu0M3cmYvGIHqskvHz3+gP2p:lqZIz52ESgNAyK5rkq00

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0904c1db92aff4fdfbc4a7bfcfea61b9_JaffaCakes118

Files

0904c1db92aff4fdfbc4a7bfcfea61b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db2263d76a38dc823e07fab2c99fbc74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
LoadLibraryExW
GetLastError
CloseHandle
ExitProcess
GetACP
CreateMutexA
LocalFree
GetModuleHandleA
GlobalLock
FindClose
HeapCreate
SetupComm
CreateFileMappingA
CreateFileA
Sleep
FreeEnvironmentStringsA
lstrlenA
FindAtomA
TlsGetValue

user32

DrawMenuBar
GetDlgItem
DispatchMessageA
GetFocus
FillRect
IsWindow
CopyRect
DefWindowProcW
CallWindowProcA
GetIconInfo
CheckRadioButton
GetDC
DrawEdge
MessageBoxA

uxtheme

GetThemeRect
DrawThemeIcon
GetThemeSysInt
DrawThemeEdge
DrawThemeText

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ