8266ebf3492e62428b4cd82f3c7d8e43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8266ebf3492e62428b4cd82f3c7d8e43_JaffaCakes118
Size

392KB
MD5

8266ebf3492e62428b4cd82f3c7d8e43
SHA1

4cc7c9013a79c7cce614b03c476d5babc0050ae6
SHA256

786cc6604ba62420068dac6cd55d2172c7522419f7e7df4304d533f12465be74
SHA512

2e737c1a8f456300c4a7738707a113dac816d3d3d38dfabbd41676ed976f95c504b3c73a046f74f89cdd4617f356d43689d8477b8fc767690a1301807bbf50cb
SSDEEP

6144:GJ1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4Rkr+:G/ApUvsfRh+ajZCBAMXoUK0VHM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8266ebf3492e62428b4cd82f3c7d8e43_JaffaCakes118

Files

8266ebf3492e62428b4cd82f3c7d8e43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

863e1150620192eb2ca3aca4ca1e7187

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GlobalFree
HeapCreate
GetACP
FindResourceA
GetModuleHandleA
GlobalUnlock
ReleaseMutex
ExitThread
LoadLibraryExW
CreateFileA
FindClose
FindAtomA
SetConsoleCursorInfo
SetLastError
PulseEvent
GetCurrentProcessId
TlsGetValue
CloseHandle
CreateMutexA

user32

DrawMenuBar
FillRect
GetDC
GetDlgItem
DefWindowProcW
GetFocus
CopyRect
GetIconInfo
IsWindow
CheckRadioButton
DrawEdge
CallWindowProcA
DispatchMessageA

uxtheme

DrawThemeEdge
GetThemeSysInt
GetThemeRect
DrawThemeIcon
DrawThemeText

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ