f56a575e474d2db9b45ad923305f97ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f56a575e474d2db9b45ad923305f97ef_JaffaCakes118
Size

374KB
MD5

f56a575e474d2db9b45ad923305f97ef
SHA1

4825627335734c01925d8bd9bd4b43ef6f831834
SHA256

f1852cdf826eec37a6649fa0b8d09dfb2575a4b54ba1ffc22106d3d44c26207b
SHA512

2ff74550252d806e5fef6fe9a0a7d1bbb7a3ca4bbfe543792e3aee56775242d8798a3c625d798eaa6319300443d7d1d580f412b820f745f92fb6b241cb250d7d
SSDEEP

6144:rq4WlRMSxKP9EoxGcTYNh91DQJ7w6Mcx8MYeWKnEWYzXTz+VNypJOVglH5fDsf1D:qRM8L9/u5Wcxr8/frTzcNS0G3fDsf1YU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f56a575e474d2db9b45ad923305f97ef_JaffaCakes118

Files

f56a575e474d2db9b45ad923305f97ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f08a2fcf94628ca9417d7c15452bdb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumberFormatA
ResumeThread
LocalFlags
GetEnvironmentVariableW
GetCurrentProcessId
GetConsoleAliasA
HeapCreate
CreateEventW
lstrlenW
InitializeCriticalSection
TlsGetValue
FindClose
LocalFree
ReadFile
SuspendThread
LoadLibraryW
GetCurrentThreadId
GetDriveTypeW
GetPrivateProfileStringA
FindAtomA

user32

EndDialog
GetSysColor
GetKeyboardType
DrawStateW
DrawTextA
CallWindowProcW
CreateWindowExA
GetClientRect
SetFocus
GetSysColor
IsWindow
DispatchMessageA
GetClassInfoA

srclient

EnableSR
EnableSR
EnableSR
EnableSR
EnableSR

clbcatq

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 484KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ