8a5759548df319bf7bd2c8c419027af3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a5759548df319bf7bd2c8c419027af3_JaffaCakes118
Size

30KB
MD5

8a5759548df319bf7bd2c8c419027af3
SHA1

5b45a2c246acb7f4ad614047ee2e355e8b03dc1f
SHA256

fe1c38d8f274c29b694beb95779967bbecffecaafd72c096c9011012d097c6a6
SHA512

223b7820180942a7c5e5de966ad077379ce98404fcd4cf18955afdca8f6f4fbffaf476251154df438505090674976b8e88d22f6110dc7a5018ff61e2f1010b0a
SSDEEP

768:NH6P51erd2XZ66Kz/GksGtU+tN3W25iRxHajYphX8mmgsdHn:Nah1erd2gz+Jw5tNW2IRxHajAsmmgsdH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a5759548df319bf7bd2c8c419027af3_JaffaCakes118

Files

8a5759548df319bf7bd2c8c419027af3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f6d98b1acf3a24067e92b654277d29a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
CreateMutexA
lstrlenW
FindResourceA
ReleaseMutex
Sleep
GetConsoleMode
GetPriorityClass
CloseHandle
SetLastError
LocalFree
GetModuleHandleA
GlobalUnlock
CreateFileA
LoadLibraryExW
TerminateThread
GetCurrentThreadId
HeapCreate
GetStdHandle
SetEnvironmentVariableA

user32

DispatchMessageA
GetIconInfo
FillRect
DrawEdge
DrawMenuBar
GetCaretPos
IsWindow
CallWindowProcA
CheckRadioButton
GetDC
CopyRect
SetFocus
GetDlgItem

apphelp

SdbGetDatabaseID
ApphelpCheckIME
SdbCloseDatabase
SdbFindFirstTag
SdbFindNextTag

clbcatq

ComPlusMigrate

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ