4a5479b00dfa9f2723176d31105a5ca7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a5479b00dfa9f2723176d31105a5ca7_JaffaCakes118
Size

392KB
MD5

4a5479b00dfa9f2723176d31105a5ca7
SHA1

0befc3fba34c2b6e6d1b1f0641e7be7f0bef37ea
SHA256

693ebc4686196159cdac61c17f1ef133bc4738e9f787f34faca94ea204861a10
SHA512

d61eaa5d99940a3b5b86436015eabe57aee7326fe5b58631801ec0ba880d65258cac72e9d69eb83315fd852dc80fadc4b9a17a54ebedfdbc72a887a570c3c37e
SSDEEP

6144:+03MUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3ddE3/:fvCJibvNYJbxYYgbRke6Dny/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a5479b00dfa9f2723176d31105a5ca7_JaffaCakes118

Files

4a5479b00dfa9f2723176d31105a5ca7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14b8ad8f7fce2ec9231433ac716f2e3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeMountPointA
FindClose
TlsGetValue
GetLastError
GetACP
FindResourceA
SetLastError
FreeConsole
UnmapViewOfFile
CreateMutexA
HeapDestroy
GetModuleHandleA
FreeEnvironmentStringsA
CreateFileA
LoadLibraryExA
HeapCreate
ExitProcess
GlobalFree
Sleep
LocalUnlock

user32

DrawMenuBar
CheckRadioButton
CallWindowProcA
DrawEdge
IsWindow
GetIconInfo
DefWindowProcW
GetFocus
CopyRect
DispatchMessageA
GetDlgItem
FillRect
GetDC

uxtheme

GetThemeSysInt
DrawThemeIcon
GetThemeRect
DrawThemeText
DrawThemeEdge

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ