da7c32c2117260f82a30048b7d078a67_JaffaCakes118 | Triage

Sharing

General

Target

da7c32c2117260f82a30048b7d078a67_JaffaCakes118
Size

789KB
MD5

da7c32c2117260f82a30048b7d078a67
SHA1

539f0683065f4add70be741696f0f7dccd676167
SHA256

d1c79220dd5a8f83eb48b0835e73908148c963c68c9025dc7f8972475f936056
SHA512

a2a4d7c01e8ff443b478e695c0c428eca20ffa1c0a58a7ccff77351a22b91e6d10f04ab6ab2ee63ad127baf1b71ffbb9d9ab38b4a8614c54b3dc3c99280ab54e
SSDEEP

12288:hF3Z7IkokOVRu743EndVHw94EZSmTWdngM5hgeq9w8xbuDvcnQ4GZmieS:71IfnI7DKBZSmKeM5ZKCDEnRk1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da7c32c2117260f82a30048b7d078a67_JaffaCakes118

Files

da7c32c2117260f82a30048b7d078a67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e574cd8bcd9aa5e41ed69425aa2f4536

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
LoadLibraryExW
SetEnvironmentVariableA
TerminateThread
FindResourceA
GetPriorityClass
TlsGetValue
GlobalUnlock
LocalFree
lstrlenW
HeapCreate
GetCurrentThreadId
GetStdHandle
SetLastError
Sleep
CreateMutexA
GetConsoleMode
GetModuleHandleA
ReleaseMutex
CloseHandle

user32

CopyRect
FillRect
IsWindow
DispatchMessageA
SetFocus
CheckRadioButton
DrawEdge
CallWindowProcA
GetDlgItem
GetDC
GetCaretPos
GetIconInfo
DrawMenuBar

apphelp

SdbCloseDatabase
SdbGetDatabaseID
SdbFindFirstTag
ApphelpCheckIME
SdbFindNextTag

clbcatq

ComPlusMigrate

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 765KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ