37bf17273a3a00cf15453e77b314fa3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37bf17273a3a00cf15453e77b314fa3b_JaffaCakes118
Size

392KB
MD5

37bf17273a3a00cf15453e77b314fa3b
SHA1

438fc68701857a2632a0ac60c5a02a4e5b55c6c5
SHA256

f989a7de9803cbbd90f941d0fc4ef44d51da377bcb27951628ed2024d0e7ddb0
SHA512

f2243475fd26bb903a6a2e65fc600615d1cdfa222c4840b6a97d203dcfc56103ef0b21e8f9fc174a259727c1b1a2dabaec7dd4815c97fdc95b401fd8c58bff96
SSDEEP

6144:pTEi1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4uK8U7FG:pIi/ApUvsfRh+ajZCBAMXoUK0VHjK8UY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37bf17273a3a00cf15453e77b314fa3b_JaffaCakes118

Files

37bf17273a3a00cf15453e77b314fa3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

254796bbe8bc7ad3b14692ad76fc27be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCursorInfo
LoadLibraryExW
GlobalFree
HeapDestroy
ReleaseMutex
UnmapViewOfFile
HeapCreate
FindClose
GetLastError
ExitThread
GetEnvironmentVariableA
SetLastError
GetACP
LocalUnlock
CreateFileA
TlsGetValue
FindResourceA
GetProcessHeap
GetModuleHandleA
CreateMutexA

user32

DefWindowProcW
CheckRadioButton
GetDlgItem
DispatchMessageA
DrawEdge
CallWindowProcA
GetDC
FillRect
DrawMenuBar
GetFocus
GetIconInfo
CopyRect
IsWindow

uxtheme

GetThemeSysInt
DrawThemeText
GetThemeRect
DrawThemeEdge
DrawThemeIcon

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ