4874099bfef6b8c085bf608db4cbd382_JaffaCakes118 | Triage

Sharing

General

Target

4874099bfef6b8c085bf608db4cbd382_JaffaCakes118
Size

373KB
MD5

4874099bfef6b8c085bf608db4cbd382
SHA1

30116cdd6b4a6f6e5f1d63049527fc3a7171c4bd
SHA256

9efa7b56e4edeb540676e1acc82e91229e75755eae149211a7a8c0202b8339a1
SHA512

b4d43f1381f299e6024d4a05704ba949a30099c4c014867219602fe459344082ffed629f36458e8c9c4053eb096794d69a81e7a207d13cd38da4020775ca6a22
SSDEEP

6144:mP/sywUtmtOQ6MD5qRcKxp+BaqQDCo1HAKjI5ER:m3/etOQ6MYRcKLXP0G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4874099bfef6b8c085bf608db4cbd382_JaffaCakes118

Files

4874099bfef6b8c085bf608db4cbd382_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61aa6e659ce8656970ea32740e02e751

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetLastError
GlobalFree
HeapCreate
GetACP
LocalUnlock
LoadLibraryExW
UnmapViewOfFile
TlsGetValue
FindClose
SetConsoleCursorInfo
GetProcessHeap
GetModuleHandleA
SetLastError
CreateMutexA
HeapDestroy
ReleaseMutex
ExitThread
CreateFileA
GetEnvironmentVariableA

user32

CheckRadioButton
FillRect
IsWindow
GetDC
CallWindowProcA
GetFocus
DrawEdge
DrawMenuBar
DispatchMessageA
DefWindowProcW
CopyRect
GetIconInfo
GetDlgItem

uxtheme

DrawThemeText
GetThemeSysInt
DrawThemeIcon
GetThemeRect
DrawThemeEdge

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ