daa3b57fc0e616f30abb79caba967a3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

daa3b57fc0e616f30abb79caba967a3b_JaffaCakes118
Size

388KB
MD5

daa3b57fc0e616f30abb79caba967a3b
SHA1

047dd5b7ad2d6343f6c9faa622c57d4b8cda5a82
SHA256

98c949f95b3bb03d89b1cad8454c3e9fc14f9e70a96f7d57148d504725b934f7
SHA512

282d5f751ad96d6dc55fc2d53448cda068c56635a0547de0f5b642e11f6785a7d3fe38843453e63977e5e9708d967f2724ada453cda5f5251fa332dbcf2d89df
SSDEEP

6144:EJ1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4RkrA:Y/ApUvsfRh+ajZCBAMXoUK0VHG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daa3b57fc0e616f30abb79caba967a3b_JaffaCakes118

Files

daa3b57fc0e616f30abb79caba967a3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

863e1150620192eb2ca3aca4ca1e7187

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GlobalFree
HeapCreate
GetACP
FindResourceA
GetModuleHandleA
GlobalUnlock
ReleaseMutex
ExitThread
LoadLibraryExW
CreateFileA
FindClose
FindAtomA
SetConsoleCursorInfo
SetLastError
PulseEvent
GetCurrentProcessId
TlsGetValue
CloseHandle
CreateMutexA

user32

DrawMenuBar
FillRect
GetDC
GetDlgItem
DefWindowProcW
GetFocus
CopyRect
GetIconInfo
IsWindow
CheckRadioButton
DrawEdge
CallWindowProcA
DispatchMessageA

uxtheme

DrawThemeEdge
GetThemeSysInt
GetThemeRect
DrawThemeIcon
DrawThemeText

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ