21ebcb79c46920e7c8d41b16626e4133_JaffaCakes118 | Triage

Sharing

General

Target

21ebcb79c46920e7c8d41b16626e4133_JaffaCakes118
Size

838KB
MD5

21ebcb79c46920e7c8d41b16626e4133
SHA1

28f9033d983417d521a66c74b13f767e07d1015e
SHA256

4ed1966ff6f308631ce45ab5a05ab1f17611f36ea4c1df4e60c282474f1d6d42
SHA512

1afba273d3c83da4c5b87ba406e499d1099f79eaa4dcc94b2238449612dd40704906d8e33762c8ba9426285a6cea2b453ea46cc4728f632fe91efd163108df5e
SSDEEP

12288:wBZuVKfOchhxp0CCtJY/LLJuZZ/N+xfxuIS9arQlLm/LmW3ONm1R4:wBMKnhjp0VYuZVWfm9llLm/Ldr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21ebcb79c46920e7c8d41b16626e4133_JaffaCakes118

Files

21ebcb79c46920e7c8d41b16626e4133_JaffaCakes118
.exe windows:4 windows x86 arch:x86

80c8ed8bf3e66258f3bdfd90e4f22d16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
SetEvent
Sleep
GetComputerNameA
CloseHandle
lstrlenA
SetLastError
CreateProcessA
GetCommandLineW
LocalFree
CreateThread
UnmapViewOfFile
GetCurrentDirectoryA
PulseEvent
GetModuleHandleA
GetTickCount
HeapCreate
LoadLibraryExA
GetSystemTime
LocalUnlock

user32

CallWindowProcA
GetScrollBarInfo
SetFocus
DrawEdge
FillRect
CreateWindowExA
IsWindow
GetKeyState
GetDC
DrawMenuBar
DispatchMessageA
CheckRadioButton
GetDlgItem

clbcatq

CheckMemoryGates
DllGetClassObject
ComPlusMigrate
SetSetupSave
SetupOpen

inetcpl.cpl

OpenFontsDialog

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE