88838062e6af93868ae9d179aa11416b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88838062e6af93868ae9d179aa11416b_JaffaCakes118
Size

815KB
MD5

88838062e6af93868ae9d179aa11416b
SHA1

9195cb64a846133fbd684a30819b36963d63fedb
SHA256

6d21969cf64c65d85893318d06da74a517cabfa1c3dd2cb57ac23c0102279ba6
SHA512

47126b392e3a0eacf2266d3dc1726d6c1382a4c60c43adf1728c53fc382db1127168594db75d293abe1497adf10e83a079c4dc2003db738377bcbd5f49356a65
SSDEEP

24576:08Bg6AmhdUSZouyqGfZCnXy71xDaxiV+c07L6NX5DRD0:0HYCIgFx4XyJxUiVNw6NXVZ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88838062e6af93868ae9d179aa11416b_JaffaCakes118

Files

88838062e6af93868ae9d179aa11416b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7273e94dfd628dee83337d56ace8d3c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
CloseHandle
GlobalLock
TlsGetValue
SetupComm
HeapCreate
CreateFileA
Sleep
CreateFileMappingA
FindAtomA
GlobalUnlock
lstrlenA
FindClose
ExitProcess
FreeEnvironmentStringsA
GetModuleHandleA
CreateMutexA
GetACP
LoadLibraryExW
GetLastError

user32

GetIconInfo
DrawMenuBar
CallWindowProcA
CheckRadioButton
GetDC
DefWindowProcW
DrawEdge
GetFocus
DispatchMessageA
IsWindow
GetDlgItem
CopyRect
FillRect
MessageBoxA

uxtheme

DrawThemeText
GetThemeSysInt
DrawThemeIcon
DrawThemeEdge
GetThemeRect

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ