47fc10b5fd29190a5fdc8cf98859d76d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47fc10b5fd29190a5fdc8cf98859d76d_JaffaCakes118
Size

815KB
MD5

47fc10b5fd29190a5fdc8cf98859d76d
SHA1

70da0c11b43225b1d9b7b8310dbdfc6fb7de69e4
SHA256

b298bccb1bcbcddd08f7b4f6380e6a0e8fc2f661a1109c88a1037db7aeb878e0
SHA512

4e103ae3f78b2e09de7306ee7363a16b41d50c1a75df070d84cfc03d30a15b0c701f32329a2a8c3f55e9a4050cae8f074ec4ea27dc1d54a6f0776f61af96c8b6
SSDEEP

12288:1ChQsximh8cMhfIY3L2V7ydkfSrdKMrWZvovB+5sOneHT2PkeiEpAjFI2AUwn:4HEmTKQ8Lo7yBrdK8WNovBYneqL7pcI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47fc10b5fd29190a5fdc8cf98859d76d_JaffaCakes118

Files

47fc10b5fd29190a5fdc8cf98859d76d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d3435e3b7897a2c79ecc8b45f330e24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
FindClose
GetLastError
GlobalUnlock
GetACP
GlobalLock
CreateFileMappingA
TlsGetValue
CloseHandle
CreateMutexA
LoadLibraryExW
ExitProcess
FreeEnvironmentStringsA
LocalFree
Sleep
SetupComm
CreateFileA
GetModuleHandleA
lstrlenA
FindAtomA

user32

DispatchMessageA
DrawMenuBar
CallWindowProcA
DrawEdge
GetDC
IsWindow
DefWindowProcW
GetFocus
CheckRadioButton
GetDlgItem
FillRect
CopyRect
GetIconInfo
MessageBoxA

uxtheme

GetThemeSysInt
DrawThemeEdge
DrawThemeText
GetThemeRect
DrawThemeIcon

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ