42a229909b42cc88283db3880a66ed0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42a229909b42cc88283db3880a66ed0b_JaffaCakes118
Size

374KB
MD5

42a229909b42cc88283db3880a66ed0b
SHA1

7be970f41d41794c380245f131869d5d6a640ecd
SHA256

f082f315a7136cbaedee5f24dcc27181aa8728a443402b664c6b5412797d6963
SHA512

d7c6dadf336aad30b2497fadec7220b62343e0224355fd634aa9083a934dcb1a6b0d3e5a9d0b5376bb8bb3e1b2a6fed7ff65f84aeebe9e032872807c953852a9
SSDEEP

6144:MyRHgemYmM/iI94EIR49N4pMVR3A9V/ZN9SPSzY6sQGQ4ikNtxFMjNRSyIhnQC6y:5Hk6izEl6MVR3AHZNUKzqQcL2/S3cSN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42a229909b42cc88283db3880a66ed0b_JaffaCakes118

Files

42a229909b42cc88283db3880a66ed0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

987c93ce0e2f58976ba71c7fad65dbf8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FindClose
SetVolumeMountPointA
IsBadCodePtr
FreeEnvironmentStringsA
GetACP
FreeConsole
CreateMutexA
TlsGetValue
SetLastError
CreateFileA
FindResourceA
LoadLibraryExA
LocalUnlock
GetLastError
GlobalFree
HeapCreate
UnmapViewOfFile
HeapDestroy
GetModuleHandleA

user32

GetDC
GetFocus
DrawMenuBar
FillRect
CopyRect
DefWindowProcW
GetDlgItem
DispatchMessageA
CheckRadioButton
CallWindowProcA
GetIconInfo
DrawEdge
IsWindow

uxtheme

DrawThemeEdge
GetThemeSysInt
DrawThemeIcon
DrawThemeText
GetThemeRect

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ