82dd4d292f0356b692f316cfa0ecf573_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82dd4d292f0356b692f316cfa0ecf573_JaffaCakes118
Size

248KB
MD5

82dd4d292f0356b692f316cfa0ecf573
SHA1

326e764496dddd5a5de2e0a885bdd2ae1992d954
SHA256

067ace8ac315d8b8d8ba8dc53709a85d0ee2735fedc04800ed4c21b5d1496da4
SHA512

065ed3b9f4f075eb334cd7eb3cd4c2e94dbfcfb09e35e25da578e9e87b1ccdd9f1b442f24091737af3010d69b85dc9de8149d4e57b1712da8311a1b9124ff8d6
SSDEEP

6144:TIgyB+OIzKc3V6K+/NEGab7Vbx9EJM/1dcu91x6BX2:TQ5cE/NEhx9EQb1M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82dd4d292f0356b692f316cfa0ecf573_JaffaCakes118

Files

82dd4d292f0356b692f316cfa0ecf573_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a384a8baf20a599f26547d9cdf6b740

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExW
GetPriorityClass
lstrlenW
GetCurrentThreadId
FindResourceA
CloseHandle
CreateMutexA
LocalFree
GetConsoleMode
GetStdHandle
SetLastError
GetModuleHandleA
Sleep
ReleaseMutex
CreateFileA
GlobalUnlock
TerminateThread
HeapCreate
TlsGetValue
SetEnvironmentVariableA

user32

GetIconInfo
CheckRadioButton
GetCaretPos
DrawMenuBar
GetDlgItem
CallWindowProcA
DrawEdge
SetFocus
IsWindow
GetDC
DispatchMessageA
FillRect
CopyRect

apphelp

ApphelpCheckIME
SdbFindFirstTag
SdbCloseDatabase
SdbGetDatabaseID
SdbFindNextTag

clbcatq

ComPlusMigrate

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 206KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ