fe63edbf74df0c2eff98e7d61999dee4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe63edbf74df0c2eff98e7d61999dee4_JaffaCakes118
Size

814KB
MD5

fe63edbf74df0c2eff98e7d61999dee4
SHA1

416f942eb9f21a0575deb5e8099b7ba348845303
SHA256

ca1a1c24549d1e9feffe2b58800579957024f19c41e82f6b4a969f48a492610a
SHA512

31151ca335064657aff205bed3ea24cd97d4432b69b406c008930a8d71bd19d61a1c85faaae8dca0cada32440384b7c396f9442fb627ee6b53a4b637541531e4
SSDEEP

24576:ptwJ9ssr/TR8DjLfn46xIi/JLhSIlzwA3urvX4:WssLTMLfai/JdtwA3i4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe63edbf74df0c2eff98e7d61999dee4_JaffaCakes118

Files

fe63edbf74df0c2eff98e7d61999dee4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e5576369c082ff1c460bb0652b1c3630

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
SetVolumeMountPointA
FindResourceA
GlobalFree
GetACP
UnmapViewOfFile
HeapDestroy
GetModuleHandleA
CreateFileA
FindClose
FreeConsole
SetLastError
Sleep
ExitProcess
GetLastError
HeapCreate
LocalUnlock
TlsGetValue
CreateMutexA
LoadLibraryExA

user32

CallWindowProcA
DefWindowProcW
DispatchMessageA
GetFocus
CheckRadioButton
CopyRect
DrawMenuBar
FillRect
GetDC
GetDlgItem
GetIconInfo
DrawEdge
IsWindow

uxtheme

DrawThemeIcon
DrawThemeEdge
GetThemeSysInt
DrawThemeText
GetThemeRect

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ