b7b7f9e9ec3c2015568a5693bd15a632_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7b7f9e9ec3c2015568a5693bd15a632_JaffaCakes118
Size

393KB
MD5

b7b7f9e9ec3c2015568a5693bd15a632
SHA1

b7d422298bacfd2d14d57aacef6af889e29c726c
SHA256

8bc473c7fd3f74c3d31bde665196a7f5b45f5b49b81f0a5cc88423e2c0bf866e
SHA512

c707580376122f2a7b57637aa97d7e30148b18fe267697e668080fa56460e67a7bcf9c6f1a80ed9346bfb0adf670bb0c5110be210f7218ad85925ffdad94dfbe
SSDEEP

6144:B9To5nhxlGFWPgynsiNYBoGFFYhaRRXcuCiX++Vzrmkqmu5jbmdVnLXJUhF:/QnhxUUSbuGFehOsuC8XmklbLXJUD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7b7f9e9ec3c2015568a5693bd15a632_JaffaCakes118

Files

b7b7f9e9ec3c2015568a5693bd15a632_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3157622df527318f30891a1a26f74b41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
CreateFileA
WaitNamedPipeA
LocalFree
GetConsoleAliasW
FindAtomA
CloseHandle
GlobalUnlock
CreateFileMappingA
TlsGetValue
LocalLock
GetModuleHandleA
HeapCreate
GetConsoleCP
Sleep
GetACP
ExitProcess
GetLastError
LoadLibraryExA
FreeEnvironmentStringsA

user32

IsWindow
GetDlgItem
DispatchMessageA
CheckRadioButton
GetIconInfo
CallWindowProcA
FillRect
DrawEdge
DefWindowProcW
DrawTextA
SetFocus
GetDC
CopyRect
MessageBoxA

clbcatq

InprocServer32FromString
SetSetupSave
GetCatalogObject
GetComputerObject
SetSetupOpen

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ