62dd1e7df5a342b11590c37d4de17050_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62dd1e7df5a342b11590c37d4de17050_JaffaCakes118
Size

393KB
MD5

62dd1e7df5a342b11590c37d4de17050
SHA1

760603d6f2940f1314f1d8df6cea37f9c702b381
SHA256

e5e0c1f91a04d212e76f336ae4454bdc59325bc7dc6029cb8e99961143b975e9
SHA512

0f941b2f1898484f4572088dad338b66f4a32c409d752dc0c211c5180df5f01f778796703b32fef3f24c0bce124a84ce283131ddd6e58d2a8c6e34d2f4e3b07a
SSDEEP

6144:Kyaao5nhxlGFWPgynsiNYBoGFFYhaRRXcuCiX++Vzrmkqmu5jbmdVnkxWdoWiw:KyXQnhxUUSbuGFehOsuC8Xmklbkxi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62dd1e7df5a342b11590c37d4de17050_JaffaCakes118

Files

62dd1e7df5a342b11590c37d4de17050_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1a8f51d2952f9d5eae00a464a58ced72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
LocalFree
TlsGetValue
GetACP
GetConsoleAliasW
CloseHandle
FreeEnvironmentStringsA
SleepEx
LoadLibraryExW
HeapCreate
GetModuleHandleA
GetLastError
CreateFileMappingA
FindClose
FindAtomA
Sleep
ExitProcess
GetConsoleCP
GlobalUnlock
LocalLock

user32

FillRect
CallWindowProcA
DrawFrame
GetDlgItem
DrawEdge
DispatchMessageA
GetFocus
CopyRect
GetDC
DefWindowProcW
CheckRadioButton
IsWindow
GetIconInfo
MessageBoxA

clbcatq

GetComputerObject
SetSetupOpen
InprocServer32FromString
GetCatalogObject
SetSetupSave

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ