40870dc12899127bb0f7758cf85a9640_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40870dc12899127bb0f7758cf85a9640_JaffaCakes118
Size

810KB
MD5

40870dc12899127bb0f7758cf85a9640
SHA1

86f1f358e6806c0607789229a3789b12bfa98c35
SHA256

b636afb86f2b0212062f9c6daaf7c412fe85515db9ece61f87eb65f7d86be4b1
SHA512

b4726518207e095c442c7f0d195317d8de112c8bee0e64a514b183b28b64fc066acde23b233d70cc40f4836ae368c23de65c257060512ad1308e7fe347297695
SSDEEP

24576:EpdZnJLb9cN2TlwwX7flTkgsGGszOe09TU6vMuwAOUc:orLb9/lwwrlTkfw1OUuwKc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40870dc12899127bb0f7758cf85a9640_JaffaCakes118

Files

40870dc12899127bb0f7758cf85a9640_JaffaCakes118
.exe windows:4 windows x86 arch:x86

164dba87bbf76a2a5c44c264a8a7f84f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
GetModuleHandleW
GetFileAttributesA
GetLastError
SetLastError
CloseHandle
lstrlenW
TlsGetValue
GetLocalTime
FindAtomA
ExitProcess
MapViewOfFile
GlobalFree
GetTickCount
FindClose
CreateFileMappingW
GetStdHandle
GetPrivateProfileIntA
VirtualAlloc
TlsAlloc

user32

DrawStateA
GetClientRect
DispatchMessageA
GetDlgItem
FillRect
CreateWindowExA
GetCaretPos
CallWindowProcA
GetClassInfoA
GetMenu
EndDialog
CloseWindow
DestroyCaret

clbcatq

SetupOpen
SetSetupSave
CheckMemoryGates
DllGetClassObject
ComPlusMigrate

ir50_32

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 801KB - Virtual size: 800KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ