dcb276175e459cbdde04e67359b9753c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcb276175e459cbdde04e67359b9753c_JaffaCakes118
Size

392KB
MD5

dcb276175e459cbdde04e67359b9753c
SHA1

9fb23f99a2869bba02bbe154f42a00d56b021ab1
SHA256

c923f74dd639b4fce74ee03d3e1ef71ce77d4f912e90fc0d0a3c0b0f11b22771
SHA512

4706f3c2759f7b17c5b32dc18492f9fc6657cb19cf698791ed22afa5ff1073a6af1b4165a7cca3d04e98dc9bc951bb57ebcb0131c7a8c65386032eb81e0c38f5
SSDEEP

6144:jg1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4vrp:U/ApUvsfRh+ajZCBAMXoUK0VHGp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcb276175e459cbdde04e67359b9753c_JaffaCakes118

Files

dcb276175e459cbdde04e67359b9753c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d008030120b1cccffbd4342186b6569

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
ReleaseMutex
GetEnvironmentVariableA
LoadLibraryExW
CreateFileA
GetProcessHeap
TlsGetValue
GetModuleHandleA
LocalUnlock
FindResourceA
CreateMutexA
GlobalFree
GetLastError
SetLastError
SetConsoleCursorInfo
HeapCreate
ExitThread
FindClose
UnmapViewOfFile
GetACP

user32

DefWindowProcW
GetDlgItem
DrawEdge
DrawMenuBar
DispatchMessageA
IsWindow
GetDC
FillRect
CheckRadioButton
GetIconInfo
GetFocus
CallWindowProcA
CopyRect

uxtheme

GetThemeRect
DrawThemeText
GetThemeSysInt
DrawThemeEdge
DrawThemeIcon

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ