b581289dd1c2c2a362e37e5ae04299e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b581289dd1c2c2a362e37e5ae04299e2_JaffaCakes118
Size

392KB
MD5

b581289dd1c2c2a362e37e5ae04299e2
SHA1

9667490754bab9bbebd353678c7b9ed125cb8070
SHA256

37bd97fa42573908cadef7ea756fe292fd40393fa0c7f5093ef9e538a34c2fc6
SHA512

295cdf1b7cb72a9c523ad21e6ffbc289ac6e10729c4a63f65c6d256175a705dc1f6ca6fa04b8db8b2e825c7967a6a0553f71bf74d89f77ec6e37aa3cd314e24c
SSDEEP

6144:bFOL1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4By3zw:pW/ApUvsfRh+ajZCBAMXoUK0VHQys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b581289dd1c2c2a362e37e5ae04299e2_JaffaCakes118

Files

b581289dd1c2c2a362e37e5ae04299e2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0eb1bb577cf3f7f050a14fdc143f423

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
UnmapViewOfFile
SetLastError
LoadLibraryExW
CreateFileA
CreateMutexA
ReleaseMutex
ExitThread
GetProcessHeap
GetACP
FindClose
GetLastError
HeapCreate
LocalUnlock
FindResourceA
SetConsoleCursorInfo
GlobalFree
TlsGetValue

user32

CheckRadioButton
GetIconInfo
DrawEdge
CopyRect
GetDlgItem
DispatchMessageA
DefWindowProcW
FillRect
CallWindowProcA
GetDC
GetFocus
IsWindow
DrawMenuBar

uxtheme

GetThemeSysInt
DrawThemeText
GetThemeRect
DrawThemeIcon
DrawThemeEdge

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ