4cd2a14d60ea5dab6146eea25fb1ab43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cd2a14d60ea5dab6146eea25fb1ab43_JaffaCakes118
Size

393KB
MD5

4cd2a14d60ea5dab6146eea25fb1ab43
SHA1

c241750d8f1be1e4ab97f52844552f56a7ac2fd1
SHA256

bd64b181f302766a515461fe56f616873995a2515d03491376460e658f9ee8e1
SHA512

e28bd1710f9af9797e99af5bab45261cb2181deb00d4a9b01667a09b70aa513c821ef0a9187d6db4ba3c68e204956213ae08849de19d42eb3441e5ceceaca81d
SSDEEP

12288:6yJY9pdmxwRWwcVGzWd0f6nZU4hZo8ydktttttttttttttDD9UM:6yJOfWwWGzUrbOYDz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cd2a14d60ea5dab6146eea25fb1ab43_JaffaCakes118

Files

4cd2a14d60ea5dab6146eea25fb1ab43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c8aca73ea9a78604d3fce082789ac971

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
FreeEnvironmentStringsA
GetACP
LocalFree
CreateFileA
FindClose
GetModuleHandleA
MapViewOfFile
SetupComm
HeapDestroy
CreateMutexA
GlobalUnlock
lstrlenA
HeapCreate
FindAtomA
ExitProcess
GetLastError
LoadLibraryExW
Sleep
CloseHandle

user32

DispatchMessageA
FillRect
GetIconInfo
GetDlgItem
DrawMenuBar
IsWindow
GetFocus
CheckRadioButton
DrawEdge
GetDC
DefWindowProcW
CopyRect
CallWindowProcA
MessageBoxA

uxtheme

DrawThemeText
GetThemeSysInt
DrawThemeEdge
GetThemeRect
DrawThemeIcon

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ