4882ad4bb60ce1969bfd7bad8c35fd8e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4882ad4bb60ce1969bfd7bad8c35fd8e_JaffaCakes118
Size

355KB
MD5

4882ad4bb60ce1969bfd7bad8c35fd8e
SHA1

26f03ff73c6c1e6d4260ebf479f43ab67213630f
SHA256

fd41f72acfbe4678dbe2279b3f16c343728fa14d01498c8121a5adc07941500a
SHA512

b856fe2bdf34d550528aa5f226d48f70e323b5a6a2252fd1fd6a1950204ec9bb8d87fe7dbce444d00d0e81980faa22c89ca90e35524092ea88c7865fb8c5b205
SSDEEP

6144:BXDoZ3fsu8isVVRdB4etHsWDZv8jU2JbcfGxcdbL70ktF/wNJRDQ91LC1s7cO/V+:BzVu8iE/B4etZDZvexeLbwbRcbCC7cO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4882ad4bb60ce1969bfd7bad8c35fd8e_JaffaCakes118

Files

4882ad4bb60ce1969bfd7bad8c35fd8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f62710ffab586a487338d4f4df889e9f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleW
CloseHandle
TlsAlloc
GetPrivateProfileIntA
ExitProcess
GetFileAttributesW
TlsGetValue
MapViewOfFile
FindClose
GlobalFree
GetComputerNameA
FindAtomA
GetTickCount
GetLastError
CreateFileA
lstrlenW
SetLastError
GetLocalTime
GetStdHandle

user32

GetMenu
GetDlgItem
EndDialog
CloseWindow
CallWindowProcA
GetClientRect
DispatchMessageA
DestroyCaret
DrawStateA
FillRect
GetCaretPos
GetClassInfoA
CreateWindowExA

clbcatq

ComPlusMigrate
ComPlusMigrate
DllGetClassObject
ComPlusMigrate
ComPlusMigrate

d3dim

D3DFree

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ