3820d051f539db3c47793bec97685d45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3820d051f539db3c47793bec97685d45_JaffaCakes118
Size

373KB
MD5

3820d051f539db3c47793bec97685d45
SHA1

3ea6a23b9cafe5aa69ac01dd90ea51610a851afe
SHA256

44952b6a370b6ba91ae20a0f91a4912db53ecc5e4904fd4f1d2fdb7e416128bb
SHA512

3ac930fbfe0b0c0b13a2890dcc1af7e34e1dd99143b36fc9e7b77975262496acccdb0a9b90b397009679b3c551bbcf6fe94b929080003edbfffdee91cd358eb6
SSDEEP

6144:SHXuohcvpGXSNqlND12ZKzWl7f2/wIA6z4nE+J010cv/p+1bMy:uXuoh6p/NU1U2mbPcqEg0L/wf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3820d051f539db3c47793bec97685d45_JaffaCakes118

Files

3820d051f539db3c47793bec97685d45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c5e6f7004499cc8c0e950851dfb44a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
SetLastError
UnmapViewOfFile
HeapDestroy
CreateMutexA
ExitThread
SetConsoleCursorInfo
LoadLibraryExW
GetProcessHeap
GetACP
CreateFileA
LocalUnlock
FindClose
HeapCreate
GlobalFree
FindResourceA
ReleaseMutex
TlsGetValue
GetLastError
GetModuleHandleA

user32

GetDlgItem
GetIconInfo
DrawEdge
DispatchMessageA
IsWindow
CopyRect
CallWindowProcA
DefWindowProcW
CheckRadioButton
GetFocus
DrawMenuBar
GetDC
FillRect

uxtheme

GetThemeRect
DrawThemeIcon
GetThemeSysInt
DrawThemeEdge
DrawThemeText

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ