4328fd44ed179ca9229a82e40432ed8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4328fd44ed179ca9229a82e40432ed8f_JaffaCakes118
Size

392KB
MD5

4328fd44ed179ca9229a82e40432ed8f
SHA1

79648a66a2547f97fedea0e2ace0fe866bb26153
SHA256

352aafd0dd1d6b48c71ddaab455d723063dfbbb024b87cbd2721119fd24dd7e9
SHA512

9107351f28bb83e87d39db8f1c7de8043a079140dc616fe7ca574efd9e55c550cd1f3dc77ca46f2d6a229785f3277707f1357e9b88efbdfd9b4104cded135666
SSDEEP

6144:Tsc5LUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3dRK8O:TH5SCJibvNYJbxYYgbRke6DbK8UN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4328fd44ed179ca9229a82e40432ed8f_JaffaCakes118

Files

4328fd44ed179ca9229a82e40432ed8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

070b9ac463c92fb1b2a2b133deb9cc79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeMountPointA
LoadLibraryExA
GlobalFree
HeapDestroy
FreeConsole
UnmapViewOfFile
HeapCreate
FindClose
GetLastError
ExitProcess
FreeEnvironmentStringsA
SetLastError
GetACP
LocalUnlock
CreateFileA
TlsGetValue
FindResourceA
Sleep
GetModuleHandleA
CreateMutexA

user32

DefWindowProcW
CheckRadioButton
GetDlgItem
DispatchMessageA
DrawEdge
CallWindowProcA
GetDC
FillRect
DrawMenuBar
GetFocus
GetIconInfo
CopyRect
IsWindow

uxtheme

GetThemeSysInt
DrawThemeText
GetThemeRect
DrawThemeEdge
DrawThemeIcon

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ