daa684e6d0864056b7293725aa15535a_JaffaCakes118 | Triage

Sharing

General

Target

daa684e6d0864056b7293725aa15535a_JaffaCakes118
Size

392KB
MD5

daa684e6d0864056b7293725aa15535a
SHA1

2ed28a6fabf04e1204c716a59d17ff7b44dad4c1
SHA256

4574bebb1952e562a613af5d52164bab47aa9f69d636dd7020c99e4d86aaa5ba
SHA512

2b063d93d18776b1701f899d8c833f5c98718145243e2fdddb650df9cbd51543a585ea762d8d7772497a56e7826b55476f0ed39817dc0a5906ea07bb0cff7000
SSDEEP

6144:8XUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3d8pgtiO0:8uCJibvNYJbxYYgbRke6DYr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daa684e6d0864056b7293725aa15535a_JaffaCakes118

Files

daa684e6d0864056b7293725aa15535a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1bf023406b7beac6885d2d72e85bddc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeMountPointA
Sleep
ExitProcess
SetLastError
CreateFileA
GetACP
FindClose
GetLastError
HeapDestroy
FindResourceA
FreeConsole
CreateMutexA
GetModuleHandleA
HeapCreate
TlsGetValue
LocalUnlock
UnmapViewOfFile
FreeEnvironmentStringsA
GlobalFree
LoadLibraryExA

user32

GetIconInfo
GetFocus
DrawMenuBar
CallWindowProcA
IsWindow
DefWindowProcW
DrawEdge
CopyRect
CheckRadioButton
GetDC
DispatchMessageA
FillRect
GetDlgItem

uxtheme

GetThemeSysInt
DrawThemeIcon
GetThemeRect
DrawThemeEdge
DrawThemeText

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ