83d84a011a2f1d77bd8c0acdb482a64e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83d84a011a2f1d77bd8c0acdb482a64e_JaffaCakes118
Size

392KB
MD5

83d84a011a2f1d77bd8c0acdb482a64e
SHA1

69d52e6ddf5b79ae3b240294f3a7cd651030bb65
SHA256

25fdd501fdfe8fb742b961ff0294db1b662e2bbca2d348171c36eb2ae1d343be
SHA512

fa5484e9b02d49539c5f4cc0bf4aebdc2b646c2267a17ee463ebf4438e2034a7c648421e24f09d34fd81aa54f36a9a94c886d0d360c451b8d7ad070ca033d175
SSDEEP

6144:R6wUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3d2NqCDf:R6jCJibvNYJbxYYgbRke6D8NqCDf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83d84a011a2f1d77bd8c0acdb482a64e_JaffaCakes118

Files

83d84a011a2f1d77bd8c0acdb482a64e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

76d846934fea507e434152bb849593e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GlobalFree
HeapDestroy
GetACP
FindResourceA
CreateMutexA
ExitProcess
GetModuleHandleA
FreeConsole
Sleep
TlsGetValue
FindClose
GetLastError
UnmapViewOfFile
FreeEnvironmentStringsA
LocalUnlock
CreateFileA
LoadLibraryExA
HeapCreate
SetVolumeMountPointA

user32

CheckRadioButton
GetDlgItem
DispatchMessageA
GetIconInfo
GetDC
FillRect
DrawEdge
IsWindow
DefWindowProcW
CallWindowProcA
DrawMenuBar
CopyRect
GetFocus

uxtheme

DrawThemeEdge
DrawThemeText
GetThemeRect
GetThemeSysInt
DrawThemeIcon

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ