637ad072594730c6ecb2d96ac4f1b4fa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

637ad072594730c6ecb2d96ac4f1b4fa_JaffaCakes118
Size

815KB
MD5

637ad072594730c6ecb2d96ac4f1b4fa
SHA1

738723f207172131126cdee287a65bc4e3c29a56
SHA256

8e6f9060577fb0cf98505ab091ab04e7fa790aae542a0aff0b370c5069344e7a
SHA512

3482e4c91223fd6a4ca7d87ca2d01e197b157619721700eb3da7ffa4d532a02df66ea32da7e135bc5b30f37e3e27367909f943d05384ce1275a243b6d8e9f33f
SSDEEP

12288:Y4AGTsrj5tSZQluM+S5unv6nqJwa+Nde1B25Xb/H+KnIj5/32XqjdUCLpO0w/60+:JIUQlD5uv6++Te1srfFnIjCqjykw0wv+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
637ad072594730c6ecb2d96ac4f1b4fa_JaffaCakes118

Files

637ad072594730c6ecb2d96ac4f1b4fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58d0a4aff7b8c8bf048cef6f8972f771

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
FreeEnvironmentStringsA
HeapCreate
GetACP
GetLastError
lstrlenA
HeapDestroy
GetModuleHandleA
LocalFree
FindAtomA
FindClose
UnmapViewOfFile
CreateMutexA
SetLastError
TlsGetValue
LoadLibraryExW
MapViewOfFile
SetupComm
CreateFileA
ExitProcess

user32

DispatchMessageA
FillRect
GetDlgItem
CopyRect
GetFocus
DrawMenuBar
CheckRadioButton
GetIconInfo
CallWindowProcA
DrawEdge
GetDC
IsWindow
DefWindowProcW
MessageBoxA

uxtheme

GetThemeRect
DrawThemeEdge
DrawThemeText
GetThemeSysInt
DrawThemeIcon

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ