0097dca6ca5e285563a90291cfc7244f_JaffaCakes118 | Triage

Sharing

General

Target

0097dca6ca5e285563a90291cfc7244f_JaffaCakes118
Size

815KB
MD5

0097dca6ca5e285563a90291cfc7244f
SHA1

13263fa03eebce2ef45aead4a5904d3ffed6dc4f
SHA256

82bd0431601855889cc9fbabf697984206e2d550ff6b2c72cf08421820f68950
SHA512

b86ea5bf7317f3582233f83d1083ab2fa5accf50679fe47a96b33d08c357d27a8e5e06aa847717df426a83bc9b9c5652206ad895b1344be749dbda7985c2df60
SSDEEP

12288:fZwQJfNdb7Wxbyj8Ove5OxGMXm4c5aOf0n8reJHsTfT0utaN+h4Qv+R8WVM:fZwedP6bbOfxrXm4zIg8z7x34g+R8WVM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0097dca6ca5e285563a90291cfc7244f_JaffaCakes118

Files

0097dca6ca5e285563a90291cfc7244f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5205c271b5605731af7d0edcd8db9eb3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetupComm
GetLastError
CreateMutexA
HeapDestroy
Sleep
CloseHandle
HeapCreate
FreeEnvironmentStringsA
FindClose
GetACP
CreateFileA
FindAtomA
GlobalUnlock
GetModuleHandleA
lstrlenA
LoadLibraryExW
MapViewOfFile
LocalFree
ExitProcess
TlsGetValue

user32

DefWindowProcW
GetDlgItem
GetDC
DrawMenuBar
CallWindowProcA
CopyRect
DrawEdge
IsWindow
CheckRadioButton
FillRect
GetIconInfo
DispatchMessageA
GetFocus
MessageBoxA

uxtheme

DrawThemeIcon
DrawThemeEdge
DrawThemeText
GetThemeSysInt
GetThemeRect

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ