08fac103c9d88a1dae19cac464c21531_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08fac103c9d88a1dae19cac464c21531_JaffaCakes118
Size

393KB
MD5

08fac103c9d88a1dae19cac464c21531
SHA1

36c34bda45a67c86578688af596585edcde128de
SHA256

14a4fba10a53ed6a7ddcb4cfac12ee78e451b1e979ac8eae007a3510b3a8374d
SHA512

4a1249785173b28512f8594f1bd67af9e1cd720858b37a94fd6a7705baa14e401ff81c5c19caac9e4ab145b59a31cec4a8a036534bd936d43adda75dd17d377d
SSDEEP

12288:uyJY9pdmxwRWwcVGzWd0f6nZU4hZo8ydktttttttttttttDD6u:uyJOfWwWGzUrbOYDh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08fac103c9d88a1dae19cac464c21531_JaffaCakes118

Files

08fac103c9d88a1dae19cac464c21531_JaffaCakes118
.exe windows:4 windows x86 arch:x86

354843baca865e034b761ae282b5e12f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
GetACP
LoadLibraryExW
FindAtomA
ExitProcess
CreateFileA
GlobalUnlock
MapViewOfFile
FreeEnvironmentStringsA
lstrlenA
TlsGetValue
LocalFree
GetLastError
Sleep
CloseHandle
SetupComm
HeapCreate
GetModuleHandleA
FindClose
CreateMutexA

user32

GetDC
CopyRect
GetDlgItem
CallWindowProcA
DefWindowProcW
CheckRadioButton
GetFocus
DispatchMessageA
IsWindow
FillRect
GetIconInfo
DrawMenuBar
DrawEdge
MessageBoxA

uxtheme

DrawThemeEdge
DrawThemeText
DrawThemeIcon
GetThemeRect
GetThemeSysInt

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ