a1430abaeeb9fdeb78bd7973428ff85c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1430abaeeb9fdeb78bd7973428ff85c_JaffaCakes118
Size

393KB
MD5

a1430abaeeb9fdeb78bd7973428ff85c
SHA1

85ee2fb9151a969b84f5cb85a5e5aad89a8bc7e6
SHA256

38d32fb14dfa820d4109d4ddeba8a95d971e7382a7a42229331a18da2e4eaac1
SHA512

00034d1537c5f38faaacf000d0545de828c9e0bbbb94ccac34480dd7b473e297f29c4717c98d212401b26fe697028d68e4fd9e6d95f785b925ede35abade9c81
SSDEEP

6144:U5j+7bo5nhxlGFWPgynsiNYBoGFFYhaRRXcuCiX++Vzrmkqmu5jbmdVnjNqEu:UA7bQnhxUUSbuGFehOsuC8XmklbB/u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1430abaeeb9fdeb78bd7973428ff85c_JaffaCakes118

Files

a1430abaeeb9fdeb78bd7973428ff85c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93d48a3d2d56cdef0984f73047cf9271

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExW
SleepEx
ExitProcess
GetLastError
LocalLock
FindAtomA
FreeEnvironmentStringsA
GetModuleHandleA
GetConsoleCP
LocalFree
HeapCreate
GetACP
TlsGetValue
CreateFileMappingA
FindClose
Sleep
GetConsoleAliasW
CloseHandle
CreateFileA
GlobalUnlock

user32

IsWindow
DefWindowProcW
CallWindowProcA
GetDC
FillRect
CheckRadioButton
DrawFrame
DispatchMessageA
CopyRect
DrawEdge
GetFocus
GetIconInfo
GetDlgItem
MessageBoxA

clbcatq

GetComputerObject
SetSetupOpen
InprocServer32FromString
GetCatalogObject
SetSetupSave

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ