a468478cf2e060c3b0a738197e76a84b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a468478cf2e060c3b0a738197e76a84b_JaffaCakes118
Size

89KB
MD5

a468478cf2e060c3b0a738197e76a84b
SHA1

3c9c2a16bf190818ad145f45bc18807fbff78fae
SHA256

63a638c95904911f46e902890641e2794413beced2fe3b22220a11acb2b233c8
SHA512

165dd8851bb4ca377d41e98d05f43d4f4cc024654028408100aa6a3850b0c4d73fe1bf17def2c844a85e0d3536aaf2c978f7a2c8b4612b4384fcf3b47c1e05ec
SSDEEP

1536:qo0jzh5JZj5xlFOuZ/GenqCxdxtaRcqNMM57coz6egm:qo0J5JFDX3GOq4abNMY7Reet

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a468478cf2e060c3b0a738197e76a84b_JaffaCakes118

Files

a468478cf2e060c3b0a738197e76a84b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b44d54cfa18d94280ddde4fa3ff4d1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
TerminateThread
lstrlenW
HeapCreate
CloseHandle
SetEnvironmentVariableA
Sleep
GlobalUnlock
TlsGetValue
CreateMutexA
LoadLibraryExW
GetCurrentThreadId
SetLastError
GetModuleHandleA
GetStdHandle
PulseEvent
CreateFileA
LocalFree
FindResourceA
GetConsoleMode

user32

CopyRect
CallWindowProcA
CheckRadioButton
DrawEdge
DispatchMessageA
SetFocus
GetClipCursor
GetDC
DrawMenuBar
GetIconInfo
FillRect
IsWindow
GetDlgItem

apphelp

SdbFindNextTag
SdbFindFirstTag
ApphelpCheckIME
SdbGetDatabaseID
SdbCloseDatabase

clbcatq

ComPlusMigrate

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE