dfa42d3de46d4e50ec99b9de37339532_JaffaCakes118 | Triage

Sharing

General

Target

dfa42d3de46d4e50ec99b9de37339532_JaffaCakes118
Size

392KB
MD5

dfa42d3de46d4e50ec99b9de37339532
SHA1

5416e1bf10189cf7a24c8d2ed5c9f6205d0f3ad2
SHA256

bce720ff842d3b64941e7869900e190e93060349a4bd08ed70fbce6fc6252778
SHA512

7b7b47ce842046d0793037ff0ad3969b0492b69ea601b5c1b94ca054c4e572369727b470f2c41c0f1667671b2d50155dc4de1fc5532aec1ddbe014157ffda5cf
SSDEEP

6144:p06X2mGp9VUwTZtX02giP9YoRRQGb8gJCPankzjzVjyTVyS9m1D4sBNP5X:qjmwTZSihRQwJCi4zVWThBkNPd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfa42d3de46d4e50ec99b9de37339532_JaffaCakes118

Files

dfa42d3de46d4e50ec99b9de37339532_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d50e3ade36fb3aaa0e83f6d02f5fd07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
LocalUnlock
FindClose
SetLastError
TlsGetValue
HeapDestroy
CreateFileA
SetConsoleCursorInfo
UnmapViewOfFile
LoadLibraryExW
GlobalFree
ExitProcess
Sleep
GetModuleHandleA
GetLastError
CreateMutexA
FindResourceA
HeapCreate
GetACP
FreeEnvironmentStringsA

user32

CallWindowProcA
CopyRect
GetIconInfo
IsWindow
GetFocus
DrawMenuBar
DefWindowProcW
GetDlgItem
DispatchMessageA
GetDC
DrawEdge
CheckRadioButton
FillRect

uxtheme

GetThemeRect
DrawThemeIcon
DrawThemeText
GetThemeSysInt
DrawThemeEdge

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ