0e46544eb7aeb4638ecaa48db7b66fd9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e46544eb7aeb4638ecaa48db7b66fd9_JaffaCakes118
Size

367KB
MD5

0e46544eb7aeb4638ecaa48db7b66fd9
SHA1

e09c1123852d1fba09add169b13357112a8f5073
SHA256

0c30f07410ecfa72dde2df2eeb093abfbc1bfea13ac7d6e892c778e92072e083
SHA512

5a8c4c5d4db6a065bcc04da36255b0341a784ff7b62ee8cb3655edb442cfc0270bcb739ec4cbc2431ba5c232f96743e476cf24c4d8984f1fed81225b54b9ec30
SSDEEP

6144:Vgg4HduNvC0agNm9lIPJ2WNDT3oCpLGAcl+DegosQSm/SjJwbK+TfgPInO:/4HduNvCZ9lIPcW93oyGd6e3sg8JT+bx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e46544eb7aeb4638ecaa48db7b66fd9_JaffaCakes118

Files

0e46544eb7aeb4638ecaa48db7b66fd9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3dbca822b2e906203c8961b89613a0da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
GetPriorityClass
CreateFileA
CloseHandle
TlsGetValue
LocalFree
GetModuleHandleA
Sleep
FindResourceA
HeapCreate
GetCurrentThreadId
SetLastError
ReleaseMutex
LoadLibraryExW
GetStdHandle
GetConsoleMode
CreateMutexA
SetEnvironmentVariableA
lstrlenW
GlobalUnlock

user32

CheckRadioButton
GetDlgItem
GetIconInfo
DrawEdge
GetCaretPos
GetDC
DispatchMessageA
DrawMenuBar
CopyRect
SetFocus
FillRect
IsWindow
CallWindowProcA

apphelp

SdbCloseDatabase
ApphelpCheckIME
SdbGetDatabaseID
SdbFindFirstTag
SdbFindNextTag

clbcatq

ComPlusMigrate

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 343KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ