2f0fb9117edb0aa0a6e3fccb9022e100_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f0fb9117edb0aa0a6e3fccb9022e100_JaffaCakes118
Size

392KB
MD5

2f0fb9117edb0aa0a6e3fccb9022e100
SHA1

5c51a0570dced38416daeac139763d644bb0f12f
SHA256

f74c4876a4143e5b351dfc8f66330bdf61936a7a8a302d1503b8832b3293977f
SHA512

455e2926ef2b00b36cced46f5add9128f5ac9e37bf81f5b96ba0ce4e88823c9cab2d6c12a552747d1f288963e05d4a14b86c6d65a891811fa17dc86dc8a67558
SSDEEP

6144:V4VYU1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4B9qxD:VE/ApUvsfRh+ajZCBAMXoUK0VHQqxD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f0fb9117edb0aa0a6e3fccb9022e100_JaffaCakes118

Files

2f0fb9117edb0aa0a6e3fccb9022e100_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d670425fc7e8d35c79f53ab59c6a2361

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateFileA
ReleaseMutex
GetACP
GetEnvironmentVariableA
CreateMutexA
TlsGetValue
HeapDestroy
ExitThread
LocalUnlock
HeapCreate
GlobalFree
GetProcessHeap
FindClose
SetLastError
FindResourceA
SetConsoleCursorInfo
GetModuleHandleA
UnmapViewOfFile
LoadLibraryExW

user32

GetFocus
DrawEdge
GetIconInfo
DefWindowProcW
DispatchMessageA
IsWindow
GetDlgItem
CopyRect
FillRect
GetDC
DrawMenuBar
CallWindowProcA
CheckRadioButton

uxtheme

DrawThemeText
DrawThemeEdge
GetThemeSysInt
GetThemeRect
DrawThemeIcon

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ