fc678abfd607a4483c0b6bee5b66f811_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc678abfd607a4483c0b6bee5b66f811_JaffaCakes118
Size

814KB
MD5

fc678abfd607a4483c0b6bee5b66f811
SHA1

3961fccc6ca8a9f0357e4bd6eda16f74bf0174e2
SHA256

f7d7f5acc6e550415df9e69fc476b0383abffa71468516282f6f75b0a14fd379
SHA512

4cdcf4e62f09999655c3dd206b7bef3a9989aa379a14e5d96f96fa3a89ecd418f1cba094b3ba4574d3881806798e57f3411110a356deff06cd502bc18a469371
SSDEEP

12288:2T3cGsYQzmFfi1npmp+q40ag3CoTUVMvdIGlopoFA05ioKdrGsSq0sfJYAkjE:2T3VsMfi18F4fgrHlZC05L4rrRoE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc678abfd607a4483c0b6bee5b66f811_JaffaCakes118

Files

fc678abfd607a4483c0b6bee5b66f811_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43a18f1e4fffa6a5ca41e45b7e6b801f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetLastError
SetConsoleCursorInfo
GlobalFree
FreeConsole
GetACP
TlsGetValue
HeapCreate
HeapDestroy
ExitProcess
CreateMutexA
Sleep
FindClose
FreeEnvironmentStringsA
LocalUnlock
UnmapViewOfFile
SetLastError
CreateFileA
LoadLibraryExW
GetModuleHandleA

user32

FillRect
CopyRect
DrawMenuBar
CallWindowProcA
DrawEdge
CheckRadioButton
GetDlgItem
DispatchMessageA
GetDC
GetIconInfo
IsWindow
GetFocus
DefWindowProcW

uxtheme

GetThemeRect
DrawThemeEdge
DrawThemeIcon
DrawThemeText
GetThemeSysInt

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ