d2f32353877e6a4d412f2d0649c193fd_JaffaCakes118 | Triage

Sharing

General

Target

d2f32353877e6a4d412f2d0649c193fd_JaffaCakes118
Size

392KB
MD5

d2f32353877e6a4d412f2d0649c193fd
SHA1

dda6004a9e60666c4d3c0c18ab96a9cbd9567f1a
SHA256

66c8ff770e8c901bb620a83842599ecfdf071567306849fbe9a6005c94ddd173
SHA512

e7d66151867607b6bcbae57ced8ce33a5ff15477e57a92e461eb0c300bf125242edeba32328eecec8e0d460b37d3d5c8184f7f41bb7c03b397225ffcea73d081
SSDEEP

12288:t1Uyau9eyDi8Zwb2FJxjTwQN5fg1Et2NL:tn9eyWKwkJxruFL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2f32353877e6a4d412f2d0649c193fd_JaffaCakes118

Files

d2f32353877e6a4d412f2d0649c193fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bd8453c79bc764ac94074757fd610a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
HeapCreate
HeapDestroy
SetVolumeMountPointA
GetModuleHandleA
GlobalFree
IsBadCodePtr
GetLastError
UnmapViewOfFile
TlsGetValue
CreateFileA
FindResourceA
ExitProcess
CreateMutexA
GetACP
FreeEnvironmentStringsA
FindClose
LoadLibraryExA
LocalUnlock
SetLastError

user32

DefWindowProcW
GetDlgItem
GetDC
DrawMenuBar
DispatchMessageA
GetIconInfo
GetFocus
CallWindowProcA
DrawEdge
CheckRadioButton
CopyRect
IsWindow
FillRect

uxtheme

GetThemeRect
GetThemeSysInt
DrawThemeEdge
DrawThemeText
DrawThemeIcon

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ