45c12aa0ed8404c4b53778359686eed2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45c12aa0ed8404c4b53778359686eed2_JaffaCakes118
Size

814KB
MD5

45c12aa0ed8404c4b53778359686eed2
SHA1

bac8e1006edf6ea63d92d9b03db9a3f11bc2c1cc
SHA256

0c93624220c48ecd9ffc2b23bb22f44367a918c399d1d927ffa5bad25f3a9fa6
SHA512

839194842b2ffcb1c0a09c4410be5ffae4f17980adcecad92a43a511fded14d8002cd1fe17ee24f61564a2f923e11e2ae4fdfaf3bd05b395fb3b9c8b97a524c1
SSDEEP

12288:5kBDj2s4FFBXwYoB8Tsp/vKBjIWG666pxqjKKUFbYW2OGHAGNffwR:iBDCJUYoGYp/vKBjIWCf2bYW2O9mwR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45c12aa0ed8404c4b53778359686eed2_JaffaCakes118

Files

45c12aa0ed8404c4b53778359686eed2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b10e0bc296032f8b1d5f6575b2ed5bac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCursorInfo
HeapDestroy
LocalUnlock
GlobalFree
FindClose
FreeEnvironmentStringsA
ExitProcess
GetLastError
UnmapViewOfFile
CreateMutexA
SetLastError
FindResourceA
TlsGetValue
GetModuleHandleA
HeapCreate
LoadLibraryExW
CreateFileA
GetACP
Sleep
FreeConsole

user32

DrawMenuBar
GetDlgItem
CopyRect
GetDC
DefWindowProcW
FillRect
GetIconInfo
GetFocus
IsWindow
DispatchMessageA
CallWindowProcA
CheckRadioButton
DrawEdge

uxtheme

DrawThemeText
DrawThemeIcon
GetThemeSysInt
DrawThemeEdge
GetThemeRect

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ