4a84b53454d71815e49a535b6b48dfe7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a84b53454d71815e49a535b6b48dfe7_JaffaCakes118
Size

814KB
MD5

4a84b53454d71815e49a535b6b48dfe7
SHA1

816149ad95e270699d197e56e93aaea4acbaf854
SHA256

303d66aba3e2ebad3e631fa4efa3e7d50c1bd0bb9a4bc4aa01ca39eb14a1f675
SHA512

d2fceb694e621694602a091f9fb80a1363055fb75b5d6a7f596f0fe07291ef9fe52b816d17a8c2f98f132655dca7bb95c4d09ba15474806c91747623f799cd37
SSDEEP

24576:tg9PAGcNbN2BFVkEl+L9OPlB7tdNUakBA:tgrcNZ2Zm8tBJUU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a84b53454d71815e49a535b6b48dfe7_JaffaCakes118

Files

4a84b53454d71815e49a535b6b48dfe7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0f1d9ccf406edee0c0ee4ae18204ce5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
Sleep
FindResourceA
GetACP
SetVolumeMountPointA
CreateFileA
UnmapViewOfFile
GlobalFree
FreeEnvironmentStringsA
LocalUnlock
LoadLibraryExA
FreeConsole
HeapDestroy
HeapCreate
FindClose
ExitProcess
SetLastError
CreateMutexA
GetModuleHandleA
TlsGetValue

user32

GetFocus
CheckRadioButton
GetIconInfo
GetDC
CopyRect
CallWindowProcA
DispatchMessageA
IsWindow
DrawEdge
DefWindowProcW
GetDlgItem
DrawMenuBar
FillRect

uxtheme

GetThemeRect
DrawThemeIcon
GetThemeSysInt
DrawThemeEdge
DrawThemeText

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ