24c65937889ad2dc375cea54fa3647c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24c65937889ad2dc375cea54fa3647c6_JaffaCakes118
Size

392KB
MD5

24c65937889ad2dc375cea54fa3647c6
SHA1

021dc08db8f92b4336136e9c5d146d1f9ba9229a
SHA256

d1a8080f0213c64c644aa21f3407100fab037add9bb254ec8c33d712feb9b67d
SHA512

bc7193b84651b512a26833854c40e41933ceb47a86b2a192793c864596bbd931b1f1e3c91f69364a020d0e26811fd87faf81a88ca9826de6c3e9168c53a28585
SSDEEP

6144:/pUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3dT0uEO:/oCJibvNYJbxYYgbRke6Dn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24c65937889ad2dc375cea54fa3647c6_JaffaCakes118

Files

24c65937889ad2dc375cea54fa3647c6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3dcd79338126cfbfdd430c4ed2f62311

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
GetModuleHandleA
GetACP
CreateMutexA
CreateFileA
SetVolumeMountPointA
TlsGetValue
FreeEnvironmentStringsA
HeapCreate
LocalUnlock
LoadLibraryExA
SetLastError
FindClose
GlobalFree
Sleep
HeapDestroy
FreeConsole
UnmapViewOfFile
FindResourceA

user32

CallWindowProcA
DispatchMessageA
IsWindow
FillRect
GetFocus
GetDC
DrawMenuBar
CopyRect
GetDlgItem
DrawEdge
GetIconInfo
CheckRadioButton
DefWindowProcW

uxtheme

DrawThemeText
GetThemeSysInt
DrawThemeIcon
DrawThemeEdge
GetThemeRect

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ