19a559271fc11065541b677565e17b22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19a559271fc11065541b677565e17b22_JaffaCakes118
Size

401KB
MD5

19a559271fc11065541b677565e17b22
SHA1

e3a5dd33b166bc0c347485a0e96a8f70615b349f
SHA256

08a73bbe675929969f55903fbf3526edebbc574af3244401c3c9aeb5358d427b
SHA512

68e328b455878c611fa82ede68c9ced5d629c3eebd9801c8da64ac6a2590a711c52bc0cd76f5046ab804db0dd06c376feb611d763aa55c482c085350082ca7c7
SSDEEP

12288:NIB2Ke//wJ48FluD9atQhyJnPbdOkNtk0gT:eBy/ScVwPjtg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19a559271fc11065541b677565e17b22_JaffaCakes118

Files

19a559271fc11065541b677565e17b22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d862ba396a9b3b403125b4edcc8a2a01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomA
CreateFileA
PulseEvent
FindClose
HeapCreate
FindResourceA
CreateMutexA
TlsGetValue
ReleaseMutex
GetEnvironmentVariableA
SetLastError
GetModuleHandleA
LoadLibraryExW
CloseHandle
ExitThread
GlobalFree
GetCurrentProcessId
SetConsoleCursorInfo
GetACP
GlobalUnlock

user32

GetDC
CheckRadioButton
GetDlgItem
GetIconInfo
GetFocus
CopyRect
CallWindowProcA
DefWindowProcW
DrawEdge
DispatchMessageA
IsWindow
DrawMenuBar
FillRect

uxtheme

DrawThemeText
DrawThemeEdge
GetThemeRect
DrawThemeIcon
GetThemeSysInt

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ