96f19a6e56f3e171f21a597cfc857e67_JaffaCakes118 | Triage

Sharing

General

Target

96f19a6e56f3e171f21a597cfc857e67_JaffaCakes118
Size

392KB
MD5

96f19a6e56f3e171f21a597cfc857e67
SHA1

c9909cc7956f07e10c13111fbfb8ec944233fc40
SHA256

af5c4599b68592aad7a02b3e002b18c9c1e7c481814802a2f47ff957dc6ab2a7
SHA512

bdf9186a19298ae018727d92337f71d1ce2f94d441ef4eb3b13c96d22eccd5eeb1d0ace80c410b510d73dde929ffc14d7bec07ba0fa88315378e0ac55de1b9b7
SSDEEP

6144:eXVYU1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4B9qxD:eT/ApUvsfRh+ajZCBAMXoUK0VHQqxD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96f19a6e56f3e171f21a597cfc857e67_JaffaCakes118

Files

96f19a6e56f3e171f21a597cfc857e67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d670425fc7e8d35c79f53ab59c6a2361

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateFileA
ReleaseMutex
GetACP
GetEnvironmentVariableA
CreateMutexA
TlsGetValue
HeapDestroy
ExitThread
LocalUnlock
HeapCreate
GlobalFree
GetProcessHeap
FindClose
SetLastError
FindResourceA
SetConsoleCursorInfo
GetModuleHandleA
UnmapViewOfFile
LoadLibraryExW

user32

GetFocus
DrawEdge
GetIconInfo
DefWindowProcW
DispatchMessageA
IsWindow
GetDlgItem
CopyRect
FillRect
GetDC
DrawMenuBar
CallWindowProcA
CheckRadioButton

uxtheme

DrawThemeText
DrawThemeEdge
GetThemeSysInt
GetThemeRect
DrawThemeIcon

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ