b4f3fd776227fdd5b051f3c2877ae247_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4f3fd776227fdd5b051f3c2877ae247_JaffaCakes118
Size

373KB
MD5

b4f3fd776227fdd5b051f3c2877ae247
SHA1

048e6d2a4325e4c73d31a98c82104624926b1b9b
SHA256

e8f5bec864b9bfc734c5bc00c2f86fdea8b60eee5d0aa86c75f05fed6b98013f
SHA512

405bdc0eaec68e4e6e1ee3607bbddc417688ece3e6b49ab188f40bf9584bfe1845117879423bc1cfbc91d34eaf974f14fbfe32f93862fc234a9f976313ac20e6
SSDEEP

6144:T18Iy3tG7hEptFsgg9AOpjvGrKd1fc3gLJUBPgUWIQ/8JlJm8OWsk4ZvR+tec:uIy1ns9pjvGO74gdUBN3Qnj1M8c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4f3fd776227fdd5b051f3c2877ae247_JaffaCakes118

Files

b4f3fd776227fdd5b051f3c2877ae247_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2c6aa2d4c01e924cda07cc174506c66c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
HeapDestroy
CreateFileA
GetModuleHandleA
SetLastError
TlsGetValue
UnmapViewOfFile
GlobalFree
CreateMutexA
Sleep
GetLastError
FreeConsole
GetACP
LoadLibraryExA
FindClose
ExitProcess
FreeEnvironmentStringsA
SetVolumeMountPointA
FindResourceA
HeapCreate

user32

DispatchMessageA
CheckRadioButton
FillRect
GetIconInfo
DrawMenuBar
CopyRect
GetDlgItem
GetFocus
DrawEdge
IsWindow
DefWindowProcW
CallWindowProcA
GetDC

uxtheme

DrawThemeText
DrawThemeEdge
GetThemeRect
DrawThemeIcon
GetThemeSysInt

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ