a4c21739a784eb3b6d0771879689e0a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4c21739a784eb3b6d0771879689e0a1_JaffaCakes118
Size

815KB
MD5

a4c21739a784eb3b6d0771879689e0a1
SHA1

42b24f0204a74bf7368f9b53d140e49c39685ea0
SHA256

c2476aa9e5fd8df00bc5310dfcaf8485096724c39cbc9700b5decb9c5e2cb73e
SHA512

17c5508d348ac0b1922018cc3c69a7c4ebd5085019c9a04fe9689a8300688ae1cf4ca4d4bc4b4b6590adc84bb06d81071c1210d27d20aa24b4f23a7de5cd92d2
SSDEEP

12288:Qwk1JJysf+XmoqvRsZiQtlKaR7vz3f1YRAfme8u2U5wyaCKh9/92eQHxfI3pX:I5+ZqZQtlKW7v7yI8uF4CKh9/CRQZX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4c21739a784eb3b6d0771879689e0a1_JaffaCakes118

Files

a4c21739a784eb3b6d0771879689e0a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71fb76bdc063d7abef933819a3838181

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
LocalFree
GetACP
UnmapViewOfFile
SetupComm
lstrlenA
FindAtomA
CreateFileA
TlsGetValue
HeapDestroy
FindClose
ExitProcess
FreeEnvironmentStringsA
GetLastError
GetModuleHandleA
GlobalUnlock
CreateMutexA
MapViewOfFile
HeapCreate
LoadLibraryExW

user32

GetIconInfo
FillRect
DispatchMessageA
IsWindow
CallWindowProcA
GetFocus
CopyRect
DefWindowProcW
GetDC
GetDlgItem
DrawEdge
DrawMenuBar
CheckRadioButton
MessageBoxA

uxtheme

GetThemeSysInt
DrawThemeText
DrawThemeEdge
DrawThemeIcon
GetThemeRect

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ