14b92cff48f647c8b1ced9397e5e6dcd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14b92cff48f647c8b1ced9397e5e6dcd_JaffaCakes118
Size

815KB
MD5

14b92cff48f647c8b1ced9397e5e6dcd
SHA1

3b0cc6828b8e5f1fe3c1012358d4c5fc50ecd734
SHA256

5d085bbdc6406a7454213798b846fe0aeaf272419b0da9f76e2599a832d60a2f
SHA512

b96ba6100db11dd05dc69841bbac7bf36219eb5c91ad1c6db958b37a1f66a7a4a1949a3788a190ea4cb232e3dfe8a5aa5510b7ad4a669e4dbb131752482d938f
SSDEEP

12288:fYzJU5RwwL2OjZAK8AnNAgzKm/a4OMNT0ycYfXQvX48ZzjNQv4GE:AzJU5nywnqeHSXOT018XQvX1Zzhx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14b92cff48f647c8b1ced9397e5e6dcd_JaffaCakes118

Files

14b92cff48f647c8b1ced9397e5e6dcd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b94c32d0126afc0114fb72720c04056

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExW
lstrlenA
CreateMutexA
CreateFileA
GlobalUnlock
CreateFileMappingA
GlobalLock
HeapCreate
FindClose
GetLastError
FreeEnvironmentStringsA
FindAtomA
LocalFree
SetupComm
ExitProcess
GetACP
CloseHandle
TlsGetValue
GetModuleHandleA
Sleep

user32

DrawEdge
FillRect
IsWindow
DrawMenuBar
CheckRadioButton
GetFocus
CallWindowProcA
GetDlgItem
DispatchMessageA
GetDC
GetIconInfo
DefWindowProcW
CopyRect
MessageBoxA

uxtheme

DrawThemeIcon
DrawThemeText
DrawThemeEdge
GetThemeSysInt
GetThemeRect

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ