4d6ad19c80d919e434b8703967bb2c60_JaffaCakes118 | Triage

Sharing

General

Target

4d6ad19c80d919e434b8703967bb2c60_JaffaCakes118
Size

373KB
MD5

4d6ad19c80d919e434b8703967bb2c60
SHA1

055f0ba86976d4631402adac8360e4afd1432622
SHA256

08baee44ccf135ba369c61ecc2d4033afe7287a5535845161a4b296d30015980
SHA512

9d4fdaf672870828488414926651623553b8095a585e72b930a938680bd53bdff7a7f20c2f50979744c4d418dd4e801887ab23bdc8a9a4a3cb512a52cbfe9194
SSDEEP

6144:iwSv4OYHVgyh1JlwAFWtiMLrqmXKWHJ5wDMz8iUcwJNL29EEE11DXU+teu:kwOYHpJaAYcerVXKiJ5UMk29hK1zj8u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d6ad19c80d919e434b8703967bb2c60_JaffaCakes118

Files

4d6ad19c80d919e434b8703967bb2c60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a0aa040331a43b2d58682214f11e36ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
HeapDestroy
CreateFileA
GetModuleHandleA
SetLastError
TlsGetValue
UnmapViewOfFile
GlobalFree
CreateMutexA
Sleep
GetLastError
ReleaseMutex
GetACP
LoadLibraryExW
FindClose
ExitThread
FreeEnvironmentStringsA
SetConsoleCursorInfo
FindResourceA
HeapCreate

user32

DispatchMessageA
CheckRadioButton
FillRect
GetIconInfo
DrawMenuBar
CopyRect
GetDlgItem
GetFocus
DrawEdge
IsWindow
DefWindowProcW
CallWindowProcA
GetDC

uxtheme

DrawThemeText
DrawThemeEdge
GetThemeRect
DrawThemeIcon
GetThemeSysInt

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ