a366766becac97d4b9e0871a9658151a_JaffaCakes118 | Triage

Sharing

General

Target

a366766becac97d4b9e0871a9658151a_JaffaCakes118
Size

373KB
MD5

a366766becac97d4b9e0871a9658151a
SHA1

23d370fc7b06160b1fe917f7c612a6190a062583
SHA256

b7fd985bc96ee746a9e96d4e7b3393824751e37334f5417a73ba9bf0ffd64a4d
SHA512

3d8092459e9bba16e1a94e0a318100a807700313e1b872a59d5487fcbfc9c8140b07ab5d579729048405267fae523dd591191703ee5fb4daac4d0458d67f88e9
SSDEEP

6144:msY3zqNcDPmtOQ6MD5qRcKxp+BaqQDCo1HAKjI5ER:mx3zgtOQ6MYRcKLXP0G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a366766becac97d4b9e0871a9658151a_JaffaCakes118

Files

a366766becac97d4b9e0871a9658151a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61aa6e659ce8656970ea32740e02e751

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetLastError
GlobalFree
HeapCreate
GetACP
LocalUnlock
LoadLibraryExW
UnmapViewOfFile
TlsGetValue
FindClose
SetConsoleCursorInfo
GetProcessHeap
GetModuleHandleA
SetLastError
CreateMutexA
HeapDestroy
ReleaseMutex
ExitThread
CreateFileA
GetEnvironmentVariableA

user32

CheckRadioButton
FillRect
IsWindow
GetDC
CallWindowProcA
GetFocus
DrawEdge
DrawMenuBar
DispatchMessageA
DefWindowProcW
CopyRect
GetIconInfo
GetDlgItem

uxtheme

DrawThemeText
GetThemeSysInt
DrawThemeIcon
GetThemeRect
DrawThemeEdge

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ