07fabae05e8503e2efbc20e2ce9f302e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07fabae05e8503e2efbc20e2ce9f302e_JaffaCakes118
Size

373KB
MD5

07fabae05e8503e2efbc20e2ce9f302e
SHA1

341fd294889b4b701ae669d0d18ab218ff5fbdf9
SHA256

6c90caf45ddb340d44dd75d22d2b8cc8c497720c861bf452697cc73c35e11e68
SHA512

4d1f93920cb6b8bde05ea51ccd15c59d18944a7255a6ee7a83013a2511b7d6385d8539ea130566618f0bfbdb63bdf5fcd70a08c93ff44d273e5d2fbfcac733be
SSDEEP

6144:b1gu9yZeN05tp7GFLKuKk8OtUPYrbgbnLYIA0Wn44JQv8kviSvs0:qu9EeN0N7G4uKk8gUQrbgzLVAFQv8k6O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07fabae05e8503e2efbc20e2ce9f302e_JaffaCakes118

Files

07fabae05e8503e2efbc20e2ce9f302e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dfb700aae0129dc09cbe948e47d5d69a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
FindClose
GetModuleHandleA
CreateFileA
HeapCreate
IsBadCodePtr
GlobalFree
HeapDestroy
LocalUnlock
TlsGetValue
FreeEnvironmentStringsA
UnmapViewOfFile
FreeConsole
SetVolumeMountPointA
GetLastError
ExitProcess
SetLastError
CreateMutexA
GetACP
LoadLibraryExA

user32

DispatchMessageA
CheckRadioButton
GetFocus
CopyRect
GetIconInfo
CallWindowProcA
GetDC
DrawEdge
FillRect
GetDlgItem
DefWindowProcW
IsWindow
DrawMenuBar

uxtheme

DrawThemeText
DrawThemeEdge
DrawThemeIcon
GetThemeRect
GetThemeSysInt

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ