40276656aa93558a7cbbbecab034687c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40276656aa93558a7cbbbecab034687c_JaffaCakes118
Size

392KB
MD5

40276656aa93558a7cbbbecab034687c
SHA1

18bfad4bfa96c716d71f7dccb371802813ee497a
SHA256

b90921c804d6a1ff8931ad103e7d97fba1fc622e9019fc76dbbb5e0c630f9945
SHA512

350ff08194d02426da708c0b43b2fd965f49ff21f0e650677e2a5741294c9d2dcf5fac5e4eb8132d99f33dd0ea0014823764255a7136d051de0c1cc94c5e60e5
SSDEEP

6144:A7UkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3d8pgtiO0:ACCJibvNYJbxYYgbRke6DYr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40276656aa93558a7cbbbecab034687c_JaffaCakes118

Files

40276656aa93558a7cbbbecab034687c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1bf023406b7beac6885d2d72e85bddc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeMountPointA
Sleep
ExitProcess
SetLastError
CreateFileA
GetACP
FindClose
GetLastError
HeapDestroy
FindResourceA
FreeConsole
CreateMutexA
GetModuleHandleA
HeapCreate
TlsGetValue
LocalUnlock
UnmapViewOfFile
FreeEnvironmentStringsA
GlobalFree
LoadLibraryExA

user32

GetIconInfo
GetFocus
DrawMenuBar
CallWindowProcA
IsWindow
DefWindowProcW
DrawEdge
CopyRect
CheckRadioButton
GetDC
DispatchMessageA
FillRect
GetDlgItem

uxtheme

GetThemeSysInt
DrawThemeIcon
GetThemeRect
DrawThemeEdge
DrawThemeText

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ