84a361f1bcc5ddfb02d31c843b5504f0_JaffaCakes118 | Triage

Sharing

General

Target

84a361f1bcc5ddfb02d31c843b5504f0_JaffaCakes118
Size

392KB
MD5

84a361f1bcc5ddfb02d31c843b5504f0
SHA1

84bf9a1dc665022a1ccbf54876b7218da77be46c
SHA256

c5652307b52784ee7d1a6a64251dfc0374d089a2e91c2024263680d99a84c4b7
SHA512

3584046c3d64f6a67026b68313c144deb6d5917460fdd2b93ff406e1c127561b0f20605091ae1048a21675d0a628cf3e87c79f6c6dbb9a16f6a094f31572cbd1
SSDEEP

6144:NOL1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4By3zw:NW/ApUvsfRh+ajZCBAMXoUK0VHQys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84a361f1bcc5ddfb02d31c843b5504f0_JaffaCakes118

Files

84a361f1bcc5ddfb02d31c843b5504f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0eb1bb577cf3f7f050a14fdc143f423

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
UnmapViewOfFile
SetLastError
LoadLibraryExW
CreateFileA
CreateMutexA
ReleaseMutex
ExitThread
GetProcessHeap
GetACP
FindClose
GetLastError
HeapCreate
LocalUnlock
FindResourceA
SetConsoleCursorInfo
GlobalFree
TlsGetValue

user32

CheckRadioButton
GetIconInfo
DrawEdge
CopyRect
GetDlgItem
DispatchMessageA
DefWindowProcW
FillRect
CallWindowProcA
GetDC
GetFocus
IsWindow
DrawMenuBar

uxtheme

GetThemeSysInt
DrawThemeText
GetThemeRect
DrawThemeIcon
DrawThemeEdge

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ