8bffcdd852d17b83c133e7263aa5394d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bffcdd852d17b83c133e7263aa5394d_JaffaCakes118
Size

814KB
MD5

8bffcdd852d17b83c133e7263aa5394d
SHA1

1c7ce924e76daca9446367039acda6f6138bfffc
SHA256

4ffc1f7cd256dce72de6c3bb57e393767025680e289300ba2f3d29b04c2e7a68
SHA512

14a31e4f26d1af7d0b485a93720d826f5f083d74107eb379198d2b79456a5f27e42639012632fa48414e7f0a71357ac464de61657d611334b5daae6b454efd9f
SSDEEP

12288:1zwLndcmsQegA8m8e8glEYqi4C7JUgK2N1VlBYQr/Ac1seC1/n6nPh4b7dXgJ3Xo:EOlTgq8Onq7TgKwI0AcK/n6PeXEXANN1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bffcdd852d17b83c133e7263aa5394d_JaffaCakes118

Files

8bffcdd852d17b83c133e7263aa5394d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5863c2bc21895c9fbc685ac00aa63ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PulseEvent
SetConsoleCursorInfo
SetLastError
GlobalFree
TlsGetValue
GlobalUnlock
GetACP
FindClose
CloseHandle
GetCurrentThreadId
ExitThread
CreateFileA
HeapCreate
ReleaseMutex
CreateMutexA
GetModuleHandleA
FindResourceA
GetEnvironmentVariableA
FindAtomA
LoadLibraryExW

user32

GetIconInfo
FillRect
DispatchMessageA
GetFocus
CallWindowProcA
GetDlgItem
CopyRect
IsWindow
GetDC
DrawMenuBar
DrawEdge
DefWindowProcW
CheckRadioButton

uxtheme

DrawThemeIcon
GetThemeSysInt
DrawThemeEdge
DrawThemeText
GetThemeRect

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ