bbe056d99dd2e17f51e1588b02f170ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbe056d99dd2e17f51e1588b02f170ce_JaffaCakes118
Size

392KB
MD5

bbe056d99dd2e17f51e1588b02f170ce
SHA1

5bef052b22e0eba89f890dfc560421a0a29b58f8
SHA256

aefa2649adc0c5a5b3371288007ac15305dec6b72bcece35e4d9877f9a817fd1
SHA512

c89120fbe2658ea36e92f42bb9017100799253f4ea9a721ec33cc7506d999648d5610b3c3f1df30a95ab27b26cf3d3efab1f205cf0b04713a6916b9f041bd923
SSDEEP

6144:XbUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3dT0uEO:XiCJibvNYJbxYYgbRke6Dn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbe056d99dd2e17f51e1588b02f170ce_JaffaCakes118

Files

bbe056d99dd2e17f51e1588b02f170ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3dcd79338126cfbfdd430c4ed2f62311

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
GetModuleHandleA
GetACP
CreateMutexA
CreateFileA
SetVolumeMountPointA
TlsGetValue
FreeEnvironmentStringsA
HeapCreate
LocalUnlock
LoadLibraryExA
SetLastError
FindClose
GlobalFree
Sleep
HeapDestroy
FreeConsole
UnmapViewOfFile
FindResourceA

user32

CallWindowProcA
DispatchMessageA
IsWindow
FillRect
GetFocus
GetDC
DrawMenuBar
CopyRect
GetDlgItem
DrawEdge
GetIconInfo
CheckRadioButton
DefWindowProcW

uxtheme

DrawThemeText
GetThemeSysInt
DrawThemeIcon
DrawThemeEdge
GetThemeRect

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ