81cca8527f5c34943e6ed28b52667642_JaffaCakes118 | Triage

Sharing

General

Target

81cca8527f5c34943e6ed28b52667642_JaffaCakes118
Size

814KB
MD5

81cca8527f5c34943e6ed28b52667642
SHA1

240625e038c2905515ffc97b53dd70acefff250a
SHA256

36ba0e5331eac1723be334065ae3a11a2a6977b3350dcf370116370783645992
SHA512

5a420ec92725d1e3b0168c356f205814622c70bd2e365a6b0437862ee692d8acf75fefaab1dcfe26c82d705e6b56def05bd663abfbbc8d3e9c57e0f554a642cc
SSDEEP

12288:31VZlQywfLFzUsf/yE8ho6FBvCerDfgURF+DjrzH/HA6Gs27vzKC5xR7+6jqQm:lzlQFfLFzV890qDoURAfH/g6jWT7+Wqf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81cca8527f5c34943e6ed28b52667642_JaffaCakes118

Files

81cca8527f5c34943e6ed28b52667642_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4e5f90c1df3047b0340ae716ace2ebb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasW
SleepEx
TlsGetValue
FreeEnvironmentStringsA
GetModuleHandleA
LocalFree
Sleep
ExitProcess
FindAtomA
LocalLock
CreateFileA
GetACP
GetConsoleCP
CloseHandle
GetLastError
LoadLibraryExW
FindClose
HeapCreate
GlobalUnlock
CreateFileMappingA

user32

CopyRect
DrawEdge
IsWindow
GetDlgItem
GetIconInfo
DispatchMessageA
FillRect
CallWindowProcA
CheckRadioButton
DrawFrame
DefWindowProcW
GetFocus
GetDC
MessageBoxA

clbcatq

GetComputerObject
SetSetupOpen
GetCatalogObject
SetSetupSave
InprocServer32FromString

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ