19f2b694f88e8ba3b460d85030b8ae54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19f2b694f88e8ba3b460d85030b8ae54_JaffaCakes118
Size

392KB
MD5

19f2b694f88e8ba3b460d85030b8ae54
SHA1

ba28fe2cde3668d34a5e6aada9b00687ab0e1ac1
SHA256

9aeaaab9c416204ff94a534fca1421b872484968be540db75295c8914e3ba6e5
SHA512

9cc217bb975c38230e6d252c0a1dcdeaf60c946d96ab79a7266f3cfb098d1b75a876489a271104978a8c1dee6f1975813a7f26f70ec9a0a32ef49e527d8ab857
SSDEEP

12288:xPvxQth/XqhLtlcmb5TZ/GawLXYcWSqxG:FovqhJlcmNTZEJ1CG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19f2b694f88e8ba3b460d85030b8ae54_JaffaCakes118

Files

19f2b694f88e8ba3b460d85030b8ae54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a3054de55286eed47f180ba2c3739690

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateFileA
FreeConsole
GetACP
FreeEnvironmentStringsA
CreateMutexA
TlsGetValue
HeapDestroy
ExitProcess
LocalUnlock
HeapCreate
LocalFree
IsBadCodePtr
FindClose
SetLastError
FindResourceA
SetVolumeMountPointA
GetModuleHandleA
UnmapViewOfFile
LoadLibraryExA

user32

GetFocus
DrawEdge
GetIconInfo
DefWindowProcW
DispatchMessageA
IsWindow
GetDlgItem
CopyRect
FillRect
GetDC
DrawMenuBar
CallWindowProcA
CheckRadioButton

uxtheme

DrawThemeText
DrawThemeEdge
GetThemeSysInt
GetThemeRect
DrawThemeIcon

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ