a19953cf9dcf2340ff7193ef36cd1b17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a19953cf9dcf2340ff7193ef36cd1b17_JaffaCakes118
Size

392KB
MD5

a19953cf9dcf2340ff7193ef36cd1b17
SHA1

5d19efa0cf8798982a06bc6dc429d96acace4cdd
SHA256

2e63982febc3574aaa2bb1485554ca68fd771c874744c2bdc8ed74d931749736
SHA512

272199b477771b2e1a2a7fdc6bc775dd68c24da654f5bd01f2cf7a60978121c1dbf268ff6155ed8f17968dc3e445cbbac9d4dfa459653f4ebd47dbba243c810c
SSDEEP

6144:EqbnUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3deGq:EzCJibvNYJbxYYgbRke6D9q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a19953cf9dcf2340ff7193ef36cd1b17_JaffaCakes118

Files

a19953cf9dcf2340ff7193ef36cd1b17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09da6570a844d21bee56134a060389f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
TlsGetValue
GetACP
SetVolumeMountPointA
GetLastError
FreeEnvironmentStringsA
HeapCreate
ExitProcess
FindResourceA
CreateFileA
FindClose
HeapDestroy
FreeConsole
LoadLibraryExA
Sleep
GlobalFree
SetLastError
LocalUnlock
GetModuleHandleA
CreateMutexA

user32

IsWindow
GetFocus
CopyRect
GetDC
DispatchMessageA
GetDlgItem
CheckRadioButton
DrawEdge
GetIconInfo
FillRect
DefWindowProcW
DrawMenuBar
CallWindowProcA

uxtheme

DrawThemeText
GetThemeSysInt
DrawThemeIcon
DrawThemeEdge
GetThemeRect

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ