da64e2844f4b2168e41006c5b832d1e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da64e2844f4b2168e41006c5b832d1e0_JaffaCakes118
Size

392KB
MD5

da64e2844f4b2168e41006c5b832d1e0
SHA1

0d83cfd76c931b21f4700bb8996a0d5012aab364
SHA256

363ad8e6e7b0e38937adbf8895c6ba1ad70b0cf97e138933e82fed59dfdfee24
SHA512

de0538fdbc0c9f82d860ac6669dce4ce761f07819ef2a796da41b54a6012f831247ad8001bab0ed5a30f7a5667b7dfaa988845dde6742e40788864009e10f5a5
SSDEEP

6144:4HGvRnuEwthcUFXqhLtf9SQZ2mAy35T3J/OZ39c78L5BvYcWgqBcsGQw:1vxQth/XqhLtlcmb5TZ/GawLXYcWLGd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da64e2844f4b2168e41006c5b832d1e0_JaffaCakes118

Files

da64e2844f4b2168e41006c5b832d1e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f945f39297254ce997129627f052da10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
LocalUnlock
TlsGetValue
FreeConsole
CreateMutexA
FindResourceA
GetModuleHandleA
UnmapViewOfFile
IsBadCodePtr
FindClose
FreeEnvironmentStringsA
HeapDestroy
SetLastError
HeapCreate
CreateFileA
GetACP
LocalFree
GetLastError
ExitProcess
SetVolumeMountPointA

user32

CallWindowProcA
GetDlgItem
GetIconInfo
DispatchMessageA
FillRect
GetFocus
DefWindowProcW
IsWindow
GetDC
CheckRadioButton
DrawEdge
CopyRect
DrawMenuBar

uxtheme

DrawThemeEdge
DrawThemeText
DrawThemeIcon
GetThemeSysInt
GetThemeRect

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ