883816c6d40eeb5f195a33ac20fe1a0f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

883816c6d40eeb5f195a33ac20fe1a0f_JaffaCakes118
Size

814KB
MD5

883816c6d40eeb5f195a33ac20fe1a0f
SHA1

f354c96fba6527a3fd1b882e42c6e7dbc221d421
SHA256

edd30e134de5283dea072d350a036e5e6876786796cae2f4251c8b36748f5370
SHA512

42499d6cd9a45ac5f70502955bc74732c49475901b4c747d89f670d5fe735bf286254d0e73da82fc5bb9178d09289c6f6fb25784970007d21879f7902964cb8a
SSDEEP

24576:xaUOlTgq8Onq7TgKwI0AcK/n6PeXEXANI:xaUOlsqvq7T10AcKvBI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
883816c6d40eeb5f195a33ac20fe1a0f_JaffaCakes118

Files

883816c6d40eeb5f195a33ac20fe1a0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

870fb082cfa7b2fef5fc3570180815b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PulseEvent
GetModuleHandleA
TlsGetValue
HeapCreate
LoadLibraryExW
FindClose
SetLastError
CreateFileA
GetACP
FindAtomA
GlobalUnlock
FindResourceA
ExitThread
GlobalFree
SetConsoleCursorInfo
ReleaseMutex
CreateMutexA
GetEnvironmentVariableA
CloseHandle
GetCurrentThreadId

user32

GetDC
GetIconInfo
CheckRadioButton
DefWindowProcW
FillRect
GetFocus
DispatchMessageA
IsWindow
GetDlgItem
CopyRect
DrawEdge
DrawMenuBar
CallWindowProcA

uxtheme

GetThemeSysInt
DrawThemeText
DrawThemeEdge
GetThemeRect
DrawThemeIcon

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ