cf5dbf0f1c3c62f08ada4f0c80da127b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf5dbf0f1c3c62f08ada4f0c80da127b_JaffaCakes118
Size

392KB
MD5

cf5dbf0f1c3c62f08ada4f0c80da127b
SHA1

e2f54a8cc6b67781d92a1b5aec7056a04d8dcb0e
SHA256

569a8e78c5ed688bbd8714553e4bb1ded0028facd81184d513519f96ee93a0b0
SHA512

75ae0e154db4c8160e5a8ab041677a204a959bc9a2d70f0cac66767cb74c825e4681a3f46c900cf4d741677faa550f85e5c5e8e2ca9c6c3982a93ee7f594c56e
SSDEEP

6144:SJ1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4Rkr+:C/ApUvsfRh+ajZCBAMXoUK0VHM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf5dbf0f1c3c62f08ada4f0c80da127b_JaffaCakes118

Files

cf5dbf0f1c3c62f08ada4f0c80da127b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

863e1150620192eb2ca3aca4ca1e7187

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GlobalFree
HeapCreate
GetACP
FindResourceA
GetModuleHandleA
GlobalUnlock
ReleaseMutex
ExitThread
LoadLibraryExW
CreateFileA
FindClose
FindAtomA
SetConsoleCursorInfo
SetLastError
PulseEvent
GetCurrentProcessId
TlsGetValue
CloseHandle
CreateMutexA

user32

DrawMenuBar
FillRect
GetDC
GetDlgItem
DefWindowProcW
GetFocus
CopyRect
GetIconInfo
IsWindow
CheckRadioButton
DrawEdge
CallWindowProcA
DispatchMessageA

uxtheme

DrawThemeEdge
GetThemeSysInt
GetThemeRect
DrawThemeIcon
DrawThemeText

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ