416b07bdaa3cb5d96895da925507ae05_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

416b07bdaa3cb5d96895da925507ae05_JaffaCakes118
Size

392KB
MD5

416b07bdaa3cb5d96895da925507ae05
SHA1

a7afb5c7b920035396a141320a5bac0735b41423
SHA256

3ef5687672a4de56df187447228263dbe066366d026b2e82627078e32225f4f7
SHA512

fa8303def8cb13ecc02d5db1a9d52e4b04b2becdb57e4ed0636f15ec400b70e2a0d664f439f6c2329aaaee90e35cb7c151661d288b1cdc4d092583d02d778e5b
SSDEEP

6144:ijW1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4unaDzz:6W/ApUvsfRh+ajZCBAMXoUK0VHhaPz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
416b07bdaa3cb5d96895da925507ae05_JaffaCakes118

Files

416b07bdaa3cb5d96895da925507ae05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

76996916971cb9f0ee6858bd3ca43b2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
CreateFileA
LoadLibraryExW
HeapCreate
ExitThread
GetLastError
CreateMutexA
SetLastError
GetEnvironmentVariableA
TlsGetValue
FindClose
HeapDestroy
LocalUnlock
GlobalFree
ReleaseMutex
UnmapViewOfFile
FindResourceA
GetProcessHeap
SetConsoleCursorInfo
GetModuleHandleA

user32

DispatchMessageA
GetIconInfo
IsWindow
DefWindowProcW
GetDlgItem
CallWindowProcA
GetFocus
FillRect
CopyRect
DrawMenuBar
GetDC
DrawEdge
CheckRadioButton

uxtheme

GetThemeSysInt
GetThemeRect
DrawThemeEdge
DrawThemeText
DrawThemeIcon

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ